CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- nec corporation hc100rc, nec aterm hc100rc firmware +1 moreAterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec corporation hc100rc, nec aterm hc100rc firmware +1 moreAterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec corporation hc100rc, nec aterm hc100rc firmware +1 moreAterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec corporation hc100rc, nec aterm hc100rc firmware +1 moreAterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec corporation hc100rc, nec aterm hc100rc firmware +1 moreAterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec corporation hc100rc, nec aterm hc100rc firmware +1 moreAterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec corporation aterm w300p, nec aterm w300p firmware +1 moreBuffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to...7.2 High
- nec corporation aterm w300p, nec aterm w300p firmware +1 moreBuffer overflow in Aterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to...7.2 High
- nec corporation aterm w300p, nec aterm w300p firmware +1 moreAterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec corporation aterm w300p, nec aterm w300p firmware +1 moreAterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec corporation aterm w300p, nec aterm w300p firmware +1 moreAterm W300P Ver1.0.13 and earlier allows attacker with administrator rights to execute arbitrary...7.2 High
- nec aterm wg1200hp firmware, nec corporation wg1200hp +1 moreAterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to...7.2 High
- nec aterm wg1200hp firmware, nec corporation wg1200hp +1 moreAterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to...7.2 High
- nec aterm wg1200hp firmware, nec corporation wg1200hp +1 moreAterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to...7.2 High
- nec aterm wg1200hp firmware, nec corporation wg1200hp +1 moreAterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to...7.2 High
- systemd, canonical ubuntu linux, debian linux +8 more +10 moreAn allocation of memory without limits, that could result in the stack clashing with another...7.5 High
- systemd, canonical ubuntu linux, debian linux +8 more +10 moreAn allocation of memory without limits, that could result in the stack clashing with another...7.4 High
- google chromeFailure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS...4.3 Medium
- google chromeA missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81...6.5 Medium
- google chromeInappropriate symlink handling and a race condition in the stateful recovery feature...7.0 High
- google chromeAn ability to process crash dumps under root privileges and inappropriate symlinks handling could...7.8 High
- google chromeInsufficient data validation in crosh could lead to a command injection under chronos privileges...7.3 High
- google chromeUsing an ID that can be controlled by a compromised renderer which allows any frame to overwrite...9.6 Critical
- google chromeA memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in...8.8 High
- traccar serverIn Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.9.8 Critical
- frog cms project cmsFrog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.4.8 Medium
- https://xtermjs.org/ xterm.js, redhat openshift container platform +1 morexterm vulnerable to remote code execution8.8 High
- mcafee web gatewayMcAfee Web Gateway denial of service attack due to Improper Input Validation7.5 High
- getbootstrap bootstrapbootstrap Cross-site Scripting vulnerability6.1 Medium
- getbootstrap bootstrapXSS vulnerability that affects bootstrap6.1 Medium
- getbootstrap bootstrapBootstrap Cross-site Scripting vulnerability6.1 Medium
- irssi, canonical ubuntu linux +1 moreIrssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.9.8 Critical
- busybox, canonical ubuntu linux +1 moreAn issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components ...7.5 High
- busybox, canonical ubuntu linux +1 moreAn issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components ...7.5 High
- dlink dir-822-us firmware, dir-822 firmware, dir-850l firmware +1 more +3 moreD-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1...9.8 Critical
- dlink dir-822-us firmware, dir-822 firmware, dir-850l firmware +1 more +3 moreD-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1...8.8 High
- qibosoftqibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan...5.5 Medium
avidemuxMageiaUpdated avidemux packages fix security vulnerabilitiesNo score- microsoft skypeAn elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle...4.6 Medium
- microsoft exchange serverAn information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants...6.5 Medium
- microsoft exchange serverA remote code execution vulnerability exists in Microsoft Exchange software when the software...9.8 Critical
- microsoft office, office online server, office word viewer +6 more +8 moreA remote code execution vulnerability exists in Microsoft Word software when it fails to properly...8.8 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +10 more +12 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- Show moreLoading…