Skip to content
OpenAdvisories

Archive

27 December 2019

Vulnerabilities first published on this day (UTC), newest first.

66 results · Feed

  • Unscored —

    In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrat…

  • Unscored —

    Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would p…

  • Unscored —

    Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would o…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote…

  • Critical 9.8
    CVE-2019-19781 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. T…

    KEV Nov 3, 2021
  • Unscored —

    wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowin…

  • Unscored —

    In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particula…

  • Unscored —

    In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users …

  • Unscored —

    libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack co…

  • Unscored —

    A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.

  • Unscored —

    A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.

  • Unscored —

    An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.

  • Unscored —

    A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.

  • Unscored —

    A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.

  • Unscored —

    An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3.

  • Unscored —

    A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.

  • Unscored —

    A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.

  • Unscored —

    An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocatio…

  • Unscored —

    An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c.

  • Unscored —

    An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dw…

  • Unscored —

    An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocatio…

  • Unscored —

    An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.

  • Unscored —

    An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dw…

  • Unscored —

    An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c.