Archive
12 November 2019
Vulnerabilities first published on this day (UTC), newest first.
138 results · Feed
-
Unscored —
Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.…
-
Unscored —
Huawei smartphones with versions earlier than Taurus-AL00B 10.0.0.41(SP2C00E41R3P2) have an improper authentication vul…
-
Unscored —
P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1) have an improper authorization vulnerabili…
-
Unscored —
P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier…
-
Unscored —
P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient verification vulnerab…
-
Unscored —
Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentic…
-
Unscored —
Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193(C00E190…
-
Unscored —
mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connect…
-
Unscored —
JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.
-
Unscored —
Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference …
-
Unscored —
An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-siz…
-
Unscored —
WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers …
-
Unscored —
babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary fi…
-
Unscored —
An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before B…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin pas…
-
Unscored —
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements wi…
-
Unscored —
The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.
-
Unscored —
The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot…
-
Unscored —
WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot…
-
Unscored —
Slack-Chat through 1.5.5 leaks a Slack Access Token in source code. An attacker can obtain a lot of information about t…
-
Unscored —
ThinkPad T460p and T470p BIOS Tamper Mechanism
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.
-
Medium 6.4
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without suffici…
-
Medium 6.4
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in r…
-
Unscored —
The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encrypt…
-
Unscored —
mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain tem…
-
Unscored —
NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in t…
-
Unscored —
It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid…
-
Unscored —
A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.
-
Unscored —
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated conne…
-
Unscored —
libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arb…
-
High 7.3
TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities
The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.…
-
High 7.3
TIBCO EBX Add-on For Data Exchange Cross-Site Scripting Vulnerabilities
The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO…
-
High 8.8
TIBCO EBX Exposes Multiple Cross-Site Scripting Vulnerabilities
The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site scriptin…
-
Unscored —
A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel…
-
Unscored —
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…
-
Unscored —
A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially …
-
Unscored —CVE-2019-1448 EPSS 30%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers cor…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…
-
Unscored —
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers cor…