Archive
December 2019
Vulnerabilities first published in this month (UTC), newest first.
1,587 results · Feed
-
Unscored —
Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attacke…
-
Unscored —CVE-2013-4868 Public exploit
Karotz API 12.07.19.00: Session Token Information Disclosure
-
Unscored —CVE-2013-4867 Public exploit
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
-
Unscored —CVE-2013-4859 Public exploit
INSTEON Hub 2242-222 lacks Web and API authentication
-
Unscored —
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request
-
Unscored —
Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities
-
Unscored —CVE-2013-4743 Public exploit
Static HTTP Server 1.0 has a Local Overflow
-
Unscored —
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbit…
-
Unscored —
Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permissio…
-
Unscored —CVE-2013-4692 Public exploit
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
-
Unscored —CVE-2013-4695 Public exploit
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
-
Unscored —
WordPress Xorbin Digital Flash Clock 1.0 has XSS
-
Unscored —CVE-2013-4665 Public exploit
SPBAS Business Automation Software 2012 has CSRF.
-
Unscored —CVE-2013-4664 Public exploit
SPBAS Business Automation Software 2012 has XSS.
-
Unscored —
Sencha Labs Connect has XSS with connect.methodOverride()
-
Unscored —
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrat…
-
Unscored —
Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would p…
-
Unscored —
Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would o…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3…
-
Unscored —
Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote…
-
Critical 9.8
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. T…
KEV Nov 3, 2021 -
Unscored —
wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowin…
-
Unscored —
In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particula…
-
Unscored —
In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users …
-
Unscored —
libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack co…
-
Unscored —
A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.
-
Unscored —
A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.
-
Unscored —
An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.
-
Unscored —
A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.
-
Unscored —
A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.
-
Unscored —
An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3.
-
Unscored —
A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
-
Unscored —
A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.
-
Unscored —
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocatio…
-
Unscored —
An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c.
-
Unscored —
An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dw…
-
Unscored —
An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocatio…
-
Unscored —
An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.