CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- cisco asr 900 series software, asr 900 series aggregation services routers +1 moreCisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability5.8 Medium
- axiosys bento4An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4_DescriptorFactory:...7.5 High
- artifex mupdfsvg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in...5.5 Medium
- artifex mupdfArtifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as...5.5 Medium
- libpng** DISPUTED ** png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as...6.5 Medium
- xiaocmsAn issue was discovered in XiaoCms 20141229. It allows admin/index.php?c=database table[] SQL...7.2 High
- advance peer to peer mlm script project peer to peer mlm scriptThe Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote...7.5 High
- polkit project polkit, canonical ubuntu linux, debian linux +6 more +8 moreIn PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because...6.7 Medium
- libtiff, canonical ubuntu linux, debian linux +1 more +3 moreThe TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by...8.8 High
- systemd, canonical ubuntu linux, debian linux +18 more +20 moreAn out of bounds read was discovered in systemd-journald in the way it parses log messages that...4.3 Medium
- cisco webex business suite, webex meeting center +1 moreCisco Webex Business Suite Cross-Site Scripting Vulnerability6.1 Medium
- imperva securesphereImperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login...8.8 High
- imperva securesphereImperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping...7.8 High
- imperva securesphereImperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time...8.1 High
- cisco asyncos, email security appliance (esa) +1 moreCisco Email Security Appliance URL Filtering Denial of Service Vulnerability8.6 High
- winscpIn WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept...7.5 High
- fedora modularity modulemdmodulemd uses an unsafe function for processing externally provided data9.8 Critical
- fedora project infrastructure bodhiBodhi Cross-site Scripting Vulnerability6.1 Medium
- intel system support utility, intel corporation intel(r) system support utility for windows +1 moreInsufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may...7.8 High
- intel ssd data center tool, intel corporation intel(r) ssd data center tool for windows +1 moreImproper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows...7.8 High
- intel sgx sdk, intel corporation intel(r) sgx sdk and platform software for windows, intel sgx platform software +2 moreImproper file verification in install routine for Intel(R) SGX SDK and Platform Software for...7.3 High
- intel corporation intel(r) proset/wireless wifi software, intel proset\/wireless software +1 moreImproper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi...7.8 High
- intel corporation intel(r) optane(tm) ssd dc p4800x, intel optane ssd dc p4800x firmware +1 moreFirmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version...4.4 Medium
- intel corporation intel(r) optane(tm) ssd dc p4800x, intel optane ssd dc p4800x firmware +1 moreInsufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version...4.4 Medium
- intel corporation intel(r) nuc, intel compute card firmware, compute stick firmware +1 more +3 moreImproper setting of device configuration in system firmware for Intel(R) NUC kits may allow a...6.2 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Disk Utilization Denial of Service Vulnerability5.3 Medium
- cisco prime infrastructureCisco Prime Infrastructure Cross-Site Scripting Vulnerability6.1 Medium
- cimtechniques cimscanIn CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.9.8 Critical
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Password Recovery Vulnerability4.3 Medium
- cisco email security appliance (esa), email security appliance firmware +1 moreCisco Email Security Appliance Memory Corruption Denial of Service Vulnerability8.6 High
- cisco iosCisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability5.3 Medium
- nelson-it open source erpNelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.9.8 Critical
- frroutingbgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x...6.5 Medium
- cisco jabber, jabber im for android +1 moreCisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability4.6 Medium
- cisco prime network control system, prime infrastructure +1 moreCisco Prime Network Control System Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco unified communications managerCisco Unified Communications Manager Digest Credentials Disclosure Vulnerability4.3 Medium
- cisco ip phone 8800 series software, ip phone 8800 series firmware +1 moreCisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability6.5 Medium
- cisco jabber for mac, jabber +1 moreCisco Jabber Client Framework Insecure Directory Permissions Vulnerability5.1 Medium
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +3 more +5 moreA memory corruption issue was addressed with improved validation. This issue affected versions...8.8 High
- apple icloud, itunes, safari +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X,...7.1 High
- macpaw cleanmymac xAn exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X,...7.1 High
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X,...7.1 High
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X,...7.1 High
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04,...7.1 High
- Show moreLoading…