CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel...6.5 Medium
- zeromq libzmq, debian linux +1 moreA pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3...8.8 High
- hucartAn issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin...8.8 High
- cubecartCubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.5.4 Medium
- red hat katello, redhat satellite +1 morekatello Cross-site Scripting vulnerability5.4 Medium
- citysearch \/ hotfrog \/ gelbeseiten clone script project \/ hotfrog \/ gelbeseiten clone scriptPHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the...6.1 Medium
- antigrain agg, svgpp +1 moreAn issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A...8.8 High
- svgppAn issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in...9.8 Critical
- antigrain agg, svgpp, debian linux +2 moreAn issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In...8.8 High
- ohtanz spam-byebyeCross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows...6.1 Medium
- usualtool usualtoolcmsAn issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks...8.8 High
- frog cms project cmsFrog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).6.1 Medium
- docker engine, redhat enterprise linux server +1 moreDocker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory...4.9 Medium
- pivotal concourseConcourse includes token in CLI authentication callback4.5 Medium
- apple macos, iphone os, mac os x +2 moreIn iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was...7.8 High
- apple iphone osIn iOS before 11.4, a memory corruption issue exists and was addressed with improved memory...7.8 High
- apple tv, iphone os, mac os x +1 more +3 moreIn macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018...9.8 Critical
- apple swiftnioIn SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.9.8 Critical
- apple safari, tvos, watchos +2 more +4 moreIn iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High...7.5 High
- apple mac os xIn macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.9.8 Critical
- apple mac os xIn macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.9.8 Critical
- apple mac os xIn macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input...5.5 Medium
- apple mac os xIn macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input...5.5 Medium
- apple mac os xIn macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue...9.8 Critical
- apple mac os xIn macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records...7.5 High
- apple icloud, itunes, watchos +2 more +4 moreIn iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for...8.8 High
- apple tv, watchos, iphone os +1 more +3 moreIn iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and...9.8 Critical
- apple safariIn Safari before 11.1, an information leakage issue existed in the handling of downloads in...7.5 High
- apple tvos, watchos, iphone os +1 more +3 moreIn iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4,...7.5 High
- apple mac os xIn macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This...5.5 Medium
- apple mac os xIn macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018...9.8 Critical
- apple icloud, itunes, safari +1 more +3 moreIn iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS...9.8 Critical
- apple iphone osIn iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed...5.9 Medium
- apple iphone osIn iOS before 11.2, an inconsistent user interface issue was addressed through improved state...6.5 Medium
- apple mac os xIn macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018...9.8 Critical
- apple iphone osIn iOS before 11.2, a type confusion issue was addressed with improved memory handling.7.5 High
- apple mac os xIn macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during...7.5 High
- apple mac os xIn macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system...6.5 Medium
- apple iphone osIn iOS before 9.3.3, a memory corruption issue existed in the kernel. This issue was addressed...7.8 High
- apple tv, iphone os, mac os +2 moreIn iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update...6.5 Medium
- apple tv, iphone os, mac os +2 moreIn iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update...6.5 Medium
- apple tv, iphone os, mac os +2 moreIn iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update...5.9 Medium
- mz-automation libiec61850An issue has been found in libIEC61850 v1.3.1. Memory_malloc and Memory_calloc in hal/memory...7.5 High
- mz-automation lib60870An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a...7.5 High
- mz-automation libiec61850An issue has been found in libIEC61850 v1.3.1. Ethernet_setProtocolFilter in hal/ethernet/linux...7.5 High
- mz-automation libiec61850An issue has been found in libIEC61850 v1.3.1. Memory_malloc in hal/memory/lib_memory.c has a...7.5 High
- cisco telepresence management suite (tms), telepresence management suite +1 moreCisco TelePresence Management Suite Cross-Site Scripting Vulnerability6.1 Medium
- cisco policy suite (cps) software, policy suite for mobile +1 moreCisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability5.3 Medium
- Show moreLoading…