CVEs published in January 2019

1,173 vulnerabilities, 147 critical, 5 exploited.

• d-link dir-823g firmware An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command... CVE-2019-7297 EPSS 12.5% 9.8 CriticalJanuary 31, 2019
• typora typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering... CVE-2019-7296 6.1 MediumJanuary 31, 2019
• typora typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of... CVE-2019-7295 6.1 MediumJanuary 31, 2019
• practecol, llc guardzilla all-in-one video security system, guardzilla gz521w firmware +1 more Guardzilla All-In-One Video Security System Hard-Coded Credential CVE-2018-5560 10.0 CriticalJanuary 31, 2019
• abb cms-770, cms-770 firmware +1 more The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read... CVE-2018-17928 6.5 MediumJanuary 31, 2019
• google android NVIDIA Tegra Gralloc module contains a vulnerability in driver in which it does not validate... CVE-2018-6241 7.8 HighJanuary 31, 2019
• eclipse openj9, the eclipse foundation eclipse openj9 +1 more In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto... CVE-2018-12548 9.8 CriticalJanuary 31, 2019
• linux Ubuntu linux regression USN-3871-2 Fix available No scoreJanuary 31, 2019
• media file manager project file manager The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a ... CVE-2018-19043 Public exploit EPSS 10.0% 5.3 MediumJanuary 31, 2019
• media file manager project file manager The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../... CVE-2018-19042 Public exploit EPSS 10.0% 5.3 MediumJanuary 31, 2019
• media file manager project file manager The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an... CVE-2018-19041 Public exploit 6.1 MediumJanuary 31, 2019
• media file manager project file manager The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory... CVE-2018-19040 Public exploit EPSS 12.1% 5.3 MediumJanuary 31, 2019
• vignette content management In Vignette Content Management version 6, it is possible to gain remote access to administrator... CVE-2018-18941 9.8 CriticalJanuary 31, 2019
• netscape enterprise server servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected... CVE-2018-18940 6.1 MediumJanuary 31, 2019
• dlink central wifimanager The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to... CVE-2018-15517 EPSS 44.1% 8.6 HighJanuary 31, 2019
• dlink central wifimanager The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers... CVE-2018-15516 5.8 MediumJanuary 31, 2019
• dlink central wifimanager The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a... CVE-2018-15515 7.8 HighJanuary 31, 2019
• netkit, debian linux +1 more An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses... CVE-2019-7283 Fix available 7.4 HighJanuary 31, 2019
• netkit, debian linux, fedoraproject fedora +2 more In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended... CVE-2019-7282 Fix available 5.9 MediumJanuary 31, 2019
• abb m2m ethernet, eth-fw firmware, fw firmware +2 more The product M2M ETHERNET (FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior) is... CVE-2018-17926 4.3 MediumJanuary 31, 2019
• ibm i IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed... CVE-2019-4040 6.1 MediumJanuary 31, 2019
• cross reference project reference An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the... CVE-2019-7250 6.1 MediumJanuary 31, 2019
• keybase In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check... CVE-2019-7249 9.8 CriticalJanuary 31, 2019
• encodable filechucker An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that... CVE-2019-7216 Public exploit 7.8 HighJanuary 31, 2019
• schedmd slurm, opensuse leap +1 more SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems. CVE-2019-6438 Fix available 9.8 CriticalJanuary 31, 2019
• linux kernel, canonical ubuntu linux +1 more In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local... CVE-2017-18360 Fix available 5.5 MediumJanuary 31, 2019
• apache http server, oracle enterprise manager ops center, hospitality guest access +2 more +4 more A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a... CVE-2019-0190 Fix available EPSS 59.9% 7.5 HighJanuary 30, 2019
• foxit, foxitsoftware reader, phantompdf +2 more An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element... CVE-2018-3956 EPSS 46.0% 6.8 MediumJanuary 30, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows... CVE-2019-7237 7.5 HighJanuary 30, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php... CVE-2019-7236 7.5 HighJanuary 30, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory... CVE-2019-7235 7.5 HighJanuary 30, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory... CVE-2019-7234 9.1 CriticalJanuary 30, 2019
• libdoc project libdoc In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference. CVE-2019-7233 8.8 HighJanuary 30, 2019
• labkey server, tenable labkey server community edition +1 more Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an... CVE-2019-3913 4.9 MediumJanuary 30, 2019
• labkey server, tenable labkey server community edition +1 more An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the... CVE-2019-3912 6.1 MediumJanuary 30, 2019
• labkey server, tenable labkey server community edition +1 more Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3... CVE-2019-3911 6.1 MediumJanuary 30, 2019
• palo alto networks pan-os The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and... CVE-2019-1566 6.1 MediumJanuary 30, 2019
• palo alto networks pan-os The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and... CVE-2019-1565 5.4 MediumJanuary 30, 2019
• phpmyadmin Mageia Updated phpmyadmin packages fix security vulnerabilities MGASA-2019-0057 Fix available No scoreJanuary 30, 2019
• php-tcpdf Mageia Updated php-tcpdf packages fix security vulnerabilities MGASA-2019-0053 Fix available No scoreJanuary 30, 2019
• omron cx-one, cx-protocol, cx-protocol within cx-one +2 more Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol... CVE-2018-19027 7.8 HighJanuary 30, 2019
• pizzashack rssh, canonical ubuntu linux, debian linux +1 more +3 more rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a... CVE-2019-1000018 Fix available 7.8 HighJanuary 30, 2019
• libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 more LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver... CVE-2018-20750 Fix available 9.8 CriticalJanuary 30, 2019
• libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 more LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver... CVE-2018-20749 Fix available 9.8 CriticalJanuary 30, 2019
• canonical ubuntu linux, debian linux, libvnc project libvncserver +6 more +8 more LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient... CVE-2018-20748 Fix available 9.8 CriticalJanuary 30, 2019
• mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 more When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)... CVE-2018-18506 Fix available 5.9 MediumJanuary 30, 2019
• mozilla firefox, firefox esr, thunderbird +8 more +10 more An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added... CVE-2018-18505 Fix available 10.0 CriticalJanuary 30, 2019
• mozilla firefox, canonical ubuntu linux +1 more A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is... CVE-2018-18504 Fix available 9.8 CriticalJanuary 30, 2019
• mozilla firefox, canonical ubuntu linux +1 more When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash... CVE-2018-18503 Fix available 8.8 HighJanuary 30, 2019
• mozilla firefox, canonical ubuntu linux +1 more Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some... CVE-2018-18502 Fix available 9.8 CriticalJanuary 30, 2019
• Show olderLoading…