Archive
October 2019
Vulnerabilities first published in this month (UTC), newest first.
90 results · Clear filters · Feed
-
Critical 9.0CVE-2019-17625 Public exploit
Rambox RCE Vulnerability
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft…
-
Unscored —CVE-2019-17624 Public exploit
"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sendi…
-
Critical 9.9CVE-2019-10760 Public exploit
Sandbox Breakout / Arbitrary Code Execution in safer-eval
safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.
-
Critical 9.8
Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT
Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.
-
Unscored —CVE-2019-14737 Public exploit
Ubisoft Uplay 92.0.0.6280 has Insecure Permissions.
-
Unscored —CVE-2017-14948 Public exploit
Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The im…
-
Critical 9.8
Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote c…
KEV Nov 7, 2024 -
Unscored —
A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of se…
-
Unscored —CVE-2019-9745 Public exploit
CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This to…
-
Unscored —
On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SE…
-
High 7.8
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interact…
KEV Nov 3, 2021 -
Unscored —
An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/RE…
-
Unscored —CVE-2019-17504 Public exploit
An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vul…
-
Unscored —CVE-2019-17497 Public exploit
Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a…
-
Critical 9.8CVE-2019-17495 Public exploit
Cross-site scripting in Swagger-UI
A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other w…
-
Unscored —CVE-2019-1364 Public exploit
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle …
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —CVE-2019-1345 Public exploit
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —CVE-2019-1344 Public exploit
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in mem…
-
High 7.8
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft …
KEV Mar 15, 2022 -
High 7.8
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka …
KEV Mar 15, 2022 -
Unscored —CVE-2019-17427 Public exploit
In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.
-
Unscored —CVE-2019-5700 Public exploit
NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it…
-
High 7.2
MantisBT Remote Code Execution
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.
-
Unscored —
Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
-
High 8.8CVE-2019-13529 Public exploit
An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actio…
-
Medium 5.9CVE-2019-6467 Public exploit
An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c
A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the ser…
-
Unscored —
Pi-Hole 4.3 allows Command Injection.
-
Unscored —CVE-2019-3980 Public exploit
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user t…
-
Unscored —CVE-2019-10963 Public exploit
Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from…
-
Unscored —
Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unautho…
-
Unscored —CVE-2019-17041 Public exploit
An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in th…
-
Low 3.7
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using man…
-
Unscored —CVE-2019-17225 Public exploit
Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" …
-
Unscored —CVE-2019-17199 Public exploit
www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of…
-
Unscored —
vBulletin through 5.5.4 mishandles custom avatars.
-
Critical 9.8
Liferay Portal Allows RCE via Deserialization of a JSON Payload
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
-
High 8.8
android-gif-drawable Double Free vulnerability
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arb…
