3 January 2020

53 results · Feed

• Unscored —
  CVE-2019-5845

  Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exp…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-5846

  Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exp…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-13766

  Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-5844

  Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exp…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-13765

  Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentia…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Jan 3, 2020
• Medium 6.5
  CVE-2019-3768

  RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticat…

  Dell RSA Authentication Manager
  Jan 3, 2020
• Unscored —
  CVE-2019-9542

  Telos Automated Message Handling System reflected XSS in itemlookup.asp

  : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Tel…

  Telos Automated Message Handling System
  Jan 3, 2020
• Unscored —
  CVE-2019-9541

  Telos Automated Message Handling System information disclosure in itemlookup.asp

  : Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.

  Telos Automated Message Handling System
  Jan 3, 2020
• Unscored —
  CVE-2019-9539

  Telos Automated Message Handling System reflected XSS in ModalWindowPopup.asp

  : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affect…

  Telos Automated Message Handling System
  Jan 3, 2020
• Unscored —
  CVE-2019-9540

  Telos Automated Message Handling System reflected XSS in prefs.asp

  : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Au…

  Telos Automated Message Handling System
  Jan 3, 2020
• Unscored —
  CVE-2019-9538

  Telos Automated Message Handling System reflected XSS in LDAP cbURL parameter

  : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue af…

  Telos Automated Message Handling System
  Jan 3, 2020
• Unscored —
  CVE-2019-9537

  Telos Automated Message Handling System reflected XSS in uploaditem.asp

  : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Tel…

  Telos Automated Message Handling System
  Jan 3, 2020
• Unscored —
  CVE-2019-19959

  ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' charac…

  sqlite3 sqlite3 Debian Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2014-8516 Public exploit EPSS 82%

  Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary c…

  Jan 3, 2020
• Unscored —
  CVE-2014-8337

  Unrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in HelpDEZk 1.0.1 and earlier…

  Jan 3, 2020
• Unscored —
  CVE-2014-5516

  Cross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.…

  Jan 3, 2020
• Unscored —
  CVE-2014-5140 Public exploit

  The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly h…

  Jan 3, 2020
• Unscored —
  CVE-2014-10398

  Multiple cross-site scripting (XSS) vulnerabilities in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client. Private Client…

  Jan 3, 2020
• Unscored —
  CVE-2014-4196

  Cross-site scripting (XSS) vulnerability in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allows remote attac…

  Jan 3, 2020
• Unscored —
  CVE-2012-5878 Public exploit

  Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary comma…

  Jan 3, 2020
• Unscored —
  CVE-2012-5693

  Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via…

  Jan 3, 2020
• Unscored —
  CVE-2019-11994

  A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380…

  Jan 3, 2020
• Unscored —
  CVE-2019-11993

  A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380…

  Jan 3, 2020
• High 8.8
  CVE-2019-5064 EPSS 11%

  Out-of-bounds Write in OpenCV

  An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code ex…

  opencv-contrib-python opencv-python opencv opencv-contrib-python-headless Debian PyPI
  Jan 3, 2020
• High 8.8
  CVE-2019-5063 EPSS 21%

  Out-of-bounds Write in OpenCV

  An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacke…

  opencv-contrib-python opencv-python opencv opencv-contrib-python-headless Debian PyPI
  Jan 3, 2020
• Unscored —
  CVE-2019-19310

  GitLab Enterprise Edition (EE) 9.0 and later through 12.5 allows Information Disclosure.

  Jan 3, 2020
• Unscored —
  CVE-2019-19309

  GitLab Enterprise Edition (EE) 8.90 and later through 12.5 has Incorrect Access Control.

  Jan 3, 2020
• Unscored —
  CVE-2019-19263

  GitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions.

  Jan 3, 2020
• Unscored —
  CVE-2019-19262

  GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions.

  Jan 3, 2020
• Unscored —
  CVE-2019-19261

  GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.

  Jan 3, 2020
• Unscored —
  CVE-2019-19260

  GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2).

  gitlab Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-19259

  GitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object Reference (IDOR).

  Jan 3, 2020
• Unscored —
  CVE-2019-19258

  GitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control.

  Jan 3, 2020
• Unscored —
  CVE-2019-19257

  GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 1 of 2).

  gitlab Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-19256

  GitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control.

  Jan 3, 2020
• Unscored —
  CVE-2019-19255

  GitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control.

  Jan 3, 2020
• Unscored —
  CVE-2012-4451

  Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inje…

  Zend Zend Framework zend-framework Ubuntu
  Jan 3, 2020
• Unscored —
  CVE-2019-19254

  GitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has Incorrect Access Control.

  Jan 3, 2020
• Unscored —
  CVE-2019-19088

  Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal.

  Jan 3, 2020
• Unscored —
  CVE-2019-19087

  Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2).

  Jan 3, 2020