Archive
3 December 2019
Vulnerabilities first published on this day (UTC), newest first.
64 results · Feed
-
Unscored —
An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code v…
-
Unscored —
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
-
High 7.8
An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially craft…
-
Medium 5.9
An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When ut…
-
Critical 9.8
An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base G…
-
Medium 5.3CVE-2019-5097 EPSS 45%
A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web ser…
-
High 7.4
Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web …
-
High 7.4
Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web…
-
High 7.4
Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server…
-
High 7.4
Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll BMP parser of the ImageGear 19.3.0 library…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGea…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGea…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft …
-
Unscored —
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07.
-
Medium 5.6
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malic…
-
Medium 5.6
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malic…
-
Medium 4.8
RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the…
-
Unscored —
In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.
-
Unscored —
The asn1_signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows re…
-
Unscored —
process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS cert…
-
Unscored —
In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cann…
-
Unscored —
In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP ob…
-
Unscored —
OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on r…
-
Unscored —
OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards UR…
-
Unscored —
Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can repla…
-
Unscored —CVE-2019-19383 Public exploit
freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if loggin…
-
Unscored —
SALTO ProAccess SPACE 5.4.3.0 allows XSS.
-
Unscored —
SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.
-
Unscored —
An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, a…
-
Unscored —
An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local …
-
Unscored —
Buffer overflow vulnerability in Autodesk FBX Software Development Kit version 2019.5. A user may be tricked into openi…
-
Unscored —
DLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An attacker may trick a us…
-
Unscored —
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed …
-
Unscored —
In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…
-
Unscored —
In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the dr…
-
Unscored —
In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the dri…
-
Unscored —
In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the dri…
-
Unscored —
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dr…
-
Unscored —
In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…