13 December 2019

59 results · Feed

• Unscored —
  CVE-2019-17599

  The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scriptin…

  Dec 13, 2019
• Unscored —
  CVE-2014-3495

  duplicity 0.6.24 has improper verification of SSL certificates

  duplicity duplicity duplicity Debian
  Dec 13, 2019
• Unscored —
  CVE-2014-2387

  Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities

  pen Debian
  Dec 13, 2019
• Unscored —
  CVE-2014-1867

  suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution

  suphp suphp
  Dec 13, 2019
• Unscored —
  CVE-2014-0241

  rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable

  rubygem-hammer_cli_foreman rubygem-hammer_cli_foreman
  Dec 13, 2019
• Unscored —
  CVE-2014-0212

  qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descri…

  qpid-cpp qpid-cpp qpid-cpp Ubuntu
  Dec 13, 2019
• Unscored —
  CVE-2014-0197

  CFME: CSRF protection vulnerability via permissive check of the referrer header

  CFME CFME
  Dec 13, 2019
• Unscored —
  CVE-2014-0175

  mcollective has a default password set at install

  mcollective mcollective mcollective mcollective Debian Ubuntu
  Dec 13, 2019
• Unscored —
  CVE-2019-19501

  VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe.

  Dec 13, 2019
• Unscored —
  CVE-2019-18838

  An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an in…

  Dec 13, 2019
• Unscored —
  CVE-2019-18802

  An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitesp…

  Dec 13, 2019
• Unscored —
  CVE-2019-18801

  An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap out…

  Dec 13, 2019
• Unscored —
  CVE-2019-13347

  An issue was discovered in the SAML Single Sign On (SSO) plugin for several Atlassian products affecting versions 3.1.0…

  Dec 13, 2019
• Unscored —
  CVE-2019-19782 Public exploit

  The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server.

  Dec 13, 2019
• Unscored —
  CVE-2019-19778

  An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.…

  libsixel libsixel Debian Ubuntu
  Dec 13, 2019
• Unscored —
  CVE-2019-19777

  stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read …

  libsixel libsixel Debian Ubuntu
  Dec 13, 2019
• High 7.7
  CVE-2019-16777

  Arbitrary File Overwrite in npm CLI

  Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a se…

  npm cli npm npm Debian Ubuntu npm
  Dec 13, 2019
• High 7.7
  CVE-2019-16776

  Unauthorized File Access in npm CLI before before version 6.13.3

  Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended node_modules folder through the bin field. A properly constructed entry in the package.json bin field would allow …

  npm cli npm npm Debian Ubuntu npm
  Dec 13, 2019
• High 7.7
  CVE-2019-16775

  Unauthorized File Access in npm CLI before before version 6.13.3

  Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.j…

  npm cli npm npm Debian Ubuntu npm
  Dec 13, 2019