CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- dolibarr erp\/crmDolibarr reflected cross-site scripting (XSS) vulnerability6.1 Medium
- dolibarr erp\/crmDolibarr stored cross-site scripting (XSS) vulnerability5.4 Medium
- minishare project minishareBuffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code...9.8 Critical
- minishare project minishareBuffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code...9.8 Critical
- driveagentDriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL ...5.5 Medium
- bmc remedy action request system serverRemedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain...6.5 Medium
- plikli cmsMultiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute...9.8 Critical
- plikli cmsMultiple cross-site scripting (XSS) vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to...6.1 Medium
- osclassOsclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014...6.1 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.10.0 Critical
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.9.8 Critical
- haulmont cuba platform, reporting +1 moreThe Reporting Addon for CUBA Platform has Persistent XSS5.4 Medium
- freebsdIn FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE...9.8 Critical
- linux kernel, redhat enterprise linux server +1 moreA flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and...4.7 Medium
- wolfsslIt was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher...5.9 Medium
- red hat ansible, canonical ubuntu linux, debian linux +6 more +8 moreAnsible sensitive information disclosure3.1 Low
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +37 more +39 moreBuffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon...7.8 High
- qualcomm mdm9615 firmware, mdm9625 firmware, mdm9635m firmware +35 more +37 morePossible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +22 more +24 moreUse after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions...7.8 High
- qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +26 more +28 moreSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon...5.5 Medium
- qualcomm mdm9607 firmware, mdm9615 firmware, mdm9625 firmware +32 more +34 moreCryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +30 more +32 moreCryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreCryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile,...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +29 more +31 moreCryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon...5.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm mdm9650 firmware, mdm9655 firmware +2 more +4 moreSecurity keys used by the terminal and NW for a session could be leaked in snapdragon mobile in...5.5 Medium
- qualcomm msm8996au firmware, sd 410 firmware, sd 412 firmware +30 more +32 moreQSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +28 more +30 moreInformation leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions...5.5 Medium
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +32 more +34 moreWhen a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure...7.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +35 more +37 moreA non-secure user may be able to access certain registers in snapdragon automobile, snapdragon...5.5 Medium
- [unknown] tower, redhat ansible tower +1 moreAnsible Tower before version 3.3.3 does not set a secure channel as it is using the default...7.3 High
- xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 moreThe web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001...9.8 Critical
- openrefineOpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during...7.5 High
- code42The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly...7.8 High
- hubspot jinjavaJinjava calls getClass5.3 Medium
- kubernetes dashboardKubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's...7.5 High
- No product listedhttp.cookiejar: Incorrect validation of pathNo score
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13....4.4 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service ...6.5 Medium
- linux kernel, canonical ubuntu linux, the linux foundation kernel: +2 moreA use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted...6.1 Medium
- chinamobile gpn2.4p21-c-cn firmwareChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the...6.1 Medium
- exiftool project exiftoolExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache...7.8 High
- rukovoditelA file-upload vulnerability exists in Rukovoditel 2.3.1. index.php?module=configuration/save...8.8 High
- dlink dir-818lw firmware, dir-860l firmware +1 moreOn D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS...9.8 Critical
- august connect, connect firmware +1 moreAn issue was discovered on August Connect devices. Insecure data transfer between the August app...9.8 Critical
- sdl web content managerThe SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that...6.5 Medium
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 morecom.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data9.8 Critical
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 moreDeserialization of Untrusted Data in jackson-databind9.8 Critical
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 moreDeserialization of Untrusted Data in jackson-databind due to polymorphic deserialization9.8 Critical
- expressvpnAn issue was discovered in ExpressVPN on Windows. The Xvpnd.exe process (which runs as a service...7.1 High
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreServer-Side Request Forgery (SSRF) in jackson-databind10.0 Critical
- Show moreLoading…