Archive
5 December 2019
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Critical 9.8
The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are vali…
-
Unscored —CVE-2019-19597 EPSS 21%
D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via s…
-
Unscored —
D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNA…
-
Medium 5.4
GitBook allows Cross-site Scripting via a local .md file.
GitBook through 2.6.9 allows XSS via a local .md file.
-
Unscored —
In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at…
-
Unscored —
In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/a…
-
High 7.5
Uncontrolled resource consumption in validators Python package
The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6.