Archive
6 December 2019
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
Low 3.1
regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js
The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.j…
-
Critical 9.8
Sandbox Breakout / Arbitrary Code Execution in safer-eval
safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError.
-
Unscored —
n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use a…
-
Unscored —
In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This could lead to remote in…
-
Unscored —
In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from…
-
Unscored —
In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements …
-
Unscored —
In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. Th…
-
Unscored —
In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This co…
-
Unscored —
In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could l…
-
Unscored —
In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead…
-
Unscored —
When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the u…
-
Unscored —
In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to l…
-
Unscored —
In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missin…
-
Unscored —
In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead …
-
Unscored —
In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling…
-
Unscored —
In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to l…
-
Unscored —
In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is…
-
High 7.1
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticat…
-
High 8.8
UAA logs all query parameters with debug logging level
Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter. A remote authenticated malicious user could gain access to user credentials via the uaa.log file if authenti…
-
Medium 4.8
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in Armeria
Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP headers via CRLF sequences when unsanitized data is used to populate the headers of an HTTP response. Thi…
-
Unscored —
Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a…
-
Unscored —
Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow ou…
-
Unscored —
An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies
-
Unscored —CVE-2019-1551 EPSS 14%
rsaz_512_sqr overflow bug on x86_64
There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect wou…
-
Unscored —
A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generatin…
-
Critical 9.8
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-P…
-
High 7.5
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-P…
-
Critical 9.8
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-P…
-
Medium 6.5
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-P…
-
Critical 9.8
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-P…
-
Unscored —
The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based …
-
Unscored —
SiteVision 4 has Incorrect Access Control.
-
Unscored —
SiteVision 4 allows Remote Code Execution.
-
Unscored —
A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an err…
-
Unscored —
In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by re…
-
Critical 9.8
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…
KEV Nov 3, 2021 -
Unscored —
A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.
-
High 8.1
In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG f…
-
High 8.1
In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG f…