Skip to content
OpenAdvisories

Archive

12 December 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 7.4

    An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected …

  • High 7.4

    An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IA…

  • High 8.1

    An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Soft…

  • High 8.8

    lodahs is malware

    The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.

  • High 7.7

    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (…

  • High 7.4

    IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the …

  • High 7.5
    CVE-2017-18640 EPSS 27%

    SnakeYAML Entity Expansion during load operation

    The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.