CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X,...7.1 High
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X,...7.1 High
- macpaw cleanmymac xThe CleanMyMac X software contains an exploitable privilege escalation vulnerability due to...7.1 High
- macpaw cleanmymac xThe CleanMyMac X software contains an exploitable privilege escalation vulnerability due to...7.1 High
- macpaw cleanmymac xThe CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists...7.1 High
- macpaw cleanmymac xThe CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists...7.1 High
- macpaw cleanmymac xThe CleanMyMac X software contains an exploitable privilege escalation vulnerability due to...7.1 High
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software...7.1 High
- shopxoAn issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the...7.5 High
- shopxoAn issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file,...9.8 Critical
- std42 elfinderSensitive Data Exposure in elFinder5.9 Medium
- gitolitecommands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync...8.1 High
- debian tmpreaper, linux +1 moreDebian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename()...7.0 High
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...5.3 Medium
- cisco ios, ios xe +1 moreCisco IOS and IOS XE Software TCP Denial of Service Vulnerability6.8 Medium
- cisco policy suite diameter routing agent, policy suite for mobile, policy suite (cps) software +2 moreCisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent Software Redis Server Unauthenticated Access Vulnerability7.3 High
- fork-cms fork cmsFork CMS XSS Vulnerability5.4 Medium
- mate-desktop mate-screensavermate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers...6.1 Medium
- jenkins git changelogStored XSS vulnerability in Jenkins Git Changelog Plugin6.1 Medium
- sonarsource sonarqube scannerJenkins SonarQube Scanner Plugin stored server authentication token in plain text7.8 High
- jfrog artifactoryJenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk7.8 High
- atlassian crowd2Jenkins Crowd 2 Integration Plugin stored credentials in plain text7.8 High
- atlassian crowd2Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability6.5 Medium
- apache mesosServer-side request forgery vulnerability in Jenkins Mesos Plugin6.5 Medium
- apache mesosImproper authorization vulnerability in Jenkins Mesos Plugin6.5 Medium
- atlassian hipchatJenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs6.5 Medium
- atlassian hipchatJenkins HipChat Plugin allows credential capture due to incorrect authorization8.8 High
- jenkins email extension templateCSRF vulnerability in Email Extension Template Plugin8.1 High
- jobconfighistory project jobconfighistoryJenkins Job Config History Plugin reflected XSS vulnerability6.1 Medium
- rebuild project rebuildCross-site Scripting in Jenkins Rebuilder Plugin5.4 Medium
- jenkins config file providerCSRF vulnerability in Config File Provider Plugin8.1 High
- jenkins config file providerStored XSS vulnerability in Config File Provider Plugin5.4 Medium
- jenkins jiraJenkins Jira Plugin Incorrect Authorization vulnerability8.8 High
- jenkins junitJenkins JUnit Plugin CSRF vulnerability6.5 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins7.8 High
- jenkinsSession Fixation in Jenkins5.4 Medium
- jenkinsImproper Authorization in Jenkins6.5 Medium
- jenkinsCross-site Scripting in Jenkins6.1 Medium
- jenkinsPath Traversal in Jenkins6.5 Medium
- devpups social pugThe "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the...6.1 Medium
- growi, inc. growiCross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject...5.4 Medium
- arne brachhold google xml sitemaps, google xml sitemaps project xml sitemaps +1 moreCross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote...4.8 Medium
- pgpool pgpooladminPgpoolAdmin 4.0 and earlier allows remote attackers to bypass the login authentication and obtain...9.8 Critical
- npm, inc. cordova-plugin-ionic-webview, ionicframework ionic web view +1 morePath Traversal in cordova-plugin-ionic-webview8.6 High
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a and toshiba home gateway hem-gw26a +2 moreToshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and...8.8 High
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a and toshiba home gateway hem-gw26a +2 moreToshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and...8.8 High
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a and toshiba home gateway hem-gw26a +2 moreCross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba...6.1 Medium
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a and toshiba home gateway hem-gw26a +2 moreToshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and...8.8 High
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a and toshiba home gateway hem-gw26a +2 moreToshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and...6.5 Medium
- yokogawa centum cs 3000 entry class, centum vp entry class, exaopc +7 more +9 moreMultiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05...7.5 High
- Show moreLoading…