Archive
26 November 2019
Vulnerabilities first published on this day (UTC), newest first.
120 results · Feed
-
Unscored —
The news module in CMSMS before 1.9.4.3 allows remote attackers to corrupt new articles.
-
Unscored —CVE-2011-1939 Public exploit
SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compat…
-
Unscored —
-
Unscored —
SQL injection vulnerability in Jifty::DBI before 0.68.
-
Unscored —
The csrf_callback function in the CSRF Magic library through 2016-03-27 is vulnerable to CSRF protection bypass as it a…
-
Unscored —
Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header i…
-
Unscored —
PEGA Platform 8.3.0 is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyStream=MyAl…
-
Unscored —
PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_L…
-
Unscored —
PEGA Platform 7.x and 8.x is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyActiv…
-
Unscored —
Centreon before 2.8.30, 18.x before 18.10.8, and 19.x before 19.04.5 allows XSS via myAccount alias and name fields.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4. It has Insecure Permissions (issu…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure Permissions.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Inse…
-
Unscored —
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has In…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filterin…
-
Unscored —CVE-2019-12526 EPSS 20%
An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. …
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public p…
-
Unscored —
An issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP request is made. This HT…
-
Critical 9.8
Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerabi…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feat…
-
Unscored —
An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious im…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki p…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 11 through 12.4 when building Nested GraphQL queries…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buff…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended c…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend…
-
Unscored —CVE-2019-18679 EPSS 43%
An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to i…
-
High 7.5
TCP-pipelined queries can bypass tcp-clients limit
With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than t…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.17 through 12.4 in the Search feature provided by …
-
Medium 6.3
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL injection. A remote attacker …
-
Unscored —
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small…
-
Unscored —
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small…
-
Unscored —
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.. It…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 2 o…
-
Unscored —
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within th…
-
Unscored —
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small…
-
Unscored —
Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the help search feature.