Archive
3 December 2019
Vulnerabilities first published on this day (UTC), newest first.
64 results · Feed
-
Unscored —
In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the dr…
-
Unscored —
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the dr…
-
Unscored —
In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the dri…
-
Unscored —
In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB dev…
-
Unscored —
In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers…
-
Unscored —
In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the driver…
-
Unscored —
In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers…
-
Unscored —
In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers…
-
Unscored —
In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the US…
-
Medium 5.4
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…
-
Medium 5.4
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…
-
Medium 4.0
IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the sys…
-
Medium 5.4
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…
-
Medium 5.4
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…
-
Critical 9.0
IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the att…
-
Unscored —
-
Unscored —
Review Board: URL processing gives unauthorized users access to review lists
-
High 8.1
SaltStack RSA Key Generation allows remote users to decrypt communications
SaltStack RSA Key Generation allows remote users to decrypt communications
-
Unscored —
-
Unscored —
OpenShift cartridge allows remote URL retrieval
-
Unscored —
-
Medium 6.5
Code Injection vulnerability
Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site.
-
Medium 6.5
API Abuse Vulnerability
API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site.
-
Unscored —
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees