Archive
7 November 2019
Vulnerabilities first published on this day (UTC), newest first.
65 results · Feed
-
Unscored —
po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS.
-
Unscored —
A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel bef…
-
Unscored —
Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux k…
-
Unscored —
A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allow…
-
Unscored —
A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through…
-
Unscored —
A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in …
-
Unscored —
A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 al…
-
Unscored —
A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows at…
-
Unscored —
A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows …
-
Unscored —
An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_…
-
Unscored —
An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to …
-
Unscored —
A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candida…
-
Unscored —
Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).
-
Unscored —
Portainer before 1.22.1 has XSS (issue 2 of 2).
-
Unscored —
Portainer before 1.22.1 allows Directory Traversal.
-
Unscored —
Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).
-
Unscored —
An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN con…
-
Unscored —
Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).
-
Unscored —
Portainer before 1.22.1 has XSS (issue 1 of 2).
-
Unscored —
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certai…
-
High 8.8
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than UTF-8 is declared in the header. This was a security measurement to prevent CVE-2018-19277 but the fix is not sufficien…
-
Unscored —
An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.…
-
Unscored —
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
-
Unscored —
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from…
-
Unscored —
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from…