Skip to content
OpenAdvisories

Archive

11 December 2019

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • High 8.8

    An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image for…

  • High 8.8

    An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A …

  • High 7.5

    An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.s…

  • High 8.1

    An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so…

  • High 7.5

    bson-objectid contains Improper input validation

    An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it det…

  • High 7.4

    A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point…

  • High 8.8

    IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system.…

  • High 7.5

    omniauth-facebook Improper Authentication vulnerability

    RubyGem omniauth-facebook has an access token security vulnerability

  • High 7.5

    Nokogiri implementation of libxslt vulnerable to heap corruption

    Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.