CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreXML External Entity Reference (XXE) in jackson-databind9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +17 more +19 moreArbitrary Code Execution in jackson-databind9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 moreArbitrary Code Execution in jackson-databind9.8 Critical
- yeswiki cercopithequeSQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier...9.8 Critical
- bijiadao waimai super cmsAn issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php...9.8 Critical
- inxedu project inxeduinxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information...9.8 Critical
- axiosys bento4An issue was discovered in Bento4 1.5.1-627. The AP4_StcoAtom class in Core/Ap4StcoAtom.cpp has...6.5 Medium
- huawei hg8010h firmware, hg8040h firmware, hg8045q firmware +4 more +6 moreThere is an information leak vulnerability in some Huawei HG products. An attacker may obtain...6.5 Medium
- saitoha libsixelIn libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the...7.8 High
- saitoha libsixelIn libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file...5.5 Medium
- libmingAn issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function...6.5 Medium
- coreftp core ftpThe server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a...7.5 High
- tobesoft xplatform, xplatform activex +1 moreA vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform...7.8 High
- gnu binutils, f5 traffix signaling delivery controller +1 moreThe demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2...7.5 High
- apache couchdbPrior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of...7.2 High
- ougc awards project awardsThe OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is...4.8 Medium
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new upstream versionNo score- aria2 project aria2, canonical ubuntu linux, debian linux +1 more +3 morearia2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and...7.8 High
- tinyexr project tinyexrAn attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in...6.5 Medium
- gnu binutilsA NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the...5.5 Medium
- simply-blog project simply-blogSimply-Blog through 2019-01-01 has SQL Injection via the admin/deleteCategories.php delete...7.5 High
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreA reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of...6.5 Medium