Skip to content
OpenAdvisories

Archive

27 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /27 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

66 results · Feed

  • Unscored —
    CVE-2019-20052

    A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==…

  • Unscored —
    CVE-2019-20053

    An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted …

    upx-ucl upx-ucl upx Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-20051

    A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability caus…

    upx-ucl upx-ucl Debian Ubuntu
  • Unscored —
    CVE-2014-6420 Public exploit

    Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2014-5289 Public exploit EPSS 12%

    Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST reques…

  • Unscored —
    CVE-2012-4980

    Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attacke…

  • Unscored —
    CVE-2014-3136 Public exploit

    Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote …

  • Unscored —
    CVE-2014-4550 Scanner template

    Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlie…

  • Unscored —
    CVE-2014-4535 Scanner template

    Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote …

  • Unscored —
    CVE-2014-4536 Scanner template

    Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infus…

  • Unscored —
    CVE-2014-4558 Scanner template

    Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earl…

  • Unscored —
    CVE-2014-4548

    Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress…

  • Unscored —
    CVE-2014-4544 Scanner template

    Cross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote at…

  • Unscored —
    CVE-2014-4539 Scanner template

    Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to …

  • Unscored —
    CVE-2014-4567

    Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder p…

  • Unscored —
    CVE-2019-20047

    An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web serve…

  • Unscored —
    CVE-2019-20048

    An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated remote attacker, with e…

  • Unscored —
    CVE-2019-20049 EPSS 13%

    An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directo…

  • Unscored —
    CVE-2007-0158

    thttpd 2007 has buffer underflow.

  • Unscored —
    CVE-2013-5027

    Collabtive 1.0 has incorrect access control

  • Unscored —
    CVE-2013-4985 Public exploit

    Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream

  • Unscored —
    CVE-2013-4982 Public exploit Scanner template EPSS 13%

    AVTECH AVN801 DVR has a security bypass via the administration login captcha

  • Unscored —
    CVE-2014-4592 Scanner template

    Cross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet plugin 0.1 and earlier …

  • Unscored —
    CVE-2013-4976 Public exploit EPSS 36%

    Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials

  • Unscored —
    CVE-2013-4975 Public exploit EPSS 12%

    Hikvision DS-2CD7153-E IP Camera has Privilege Escalation

  • Unscored —
    CVE-2014-4519

    Cross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attacke…

  • Unscored —
    CVE-2013-4868 Public exploit

    Karotz API 12.07.19.00: Session Token Information Disclosure

  • Unscored —
    CVE-2013-4867 Public exploit

    Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking

  • Unscored —
    CVE-2013-4859 Public exploit

    INSTEON Hub 2242-222 lacks Web and API authentication

  • Unscored —
    CVE-2013-4796

    ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request

  • Unscored —
    CVE-2013-4621

    Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities

  • Unscored —
    CVE-2013-4743 Public exploit

    Static HTTP Server 1.0 has a Local Overflow

  • Unscored —
    CVE-2013-4764

    Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbit…

  • Unscored —
    CVE-2013-4763

    Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permissio…

  • Unscored —
    CVE-2013-4692 Public exploit

    Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS

  • Unscored —
    CVE-2013-4695 Public exploit

    Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution

  • Unscored —
    CVE-2013-4693

    WordPress Xorbin Digital Flash Clock 1.0 has XSS

  • Unscored —
    CVE-2013-4665 Public exploit

    SPBAS Business Automation Software 2012 has CSRF.

  • Unscored —
    CVE-2013-4664 Public exploit

    SPBAS Business Automation Software 2012 has XSS.

  • Unscored —
    CVE-2013-4691

    Sencha Labs Connect has XSS with connect.methodOverride()