CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- juniper junos, juniper networks junos os, fedoraproject fedora +2 moreJunos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).7.5 High
- cisco identity services engine softwareCisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities6.1 Medium
- drupal, drupal core +1 moreREST API can bypass comment approval - Access Bypass - Moderately Critical7.4 High
- cisco identity services engine softwareCisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities6.1 Medium
- ibm spss analytic serverIBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- drupalDrupal Entity access bypass for entities that do not have UUIDs or have protected revisions9.8 Critical
- tiki tikiwiki cms\/groupwareIn Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki...8.8 High
- pydioIn Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed...9.8 Critical
- prestashopPrestaShop PHP Object Injection8.8 High
- cubecartCubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my...9.8 Critical
- oxid-esales eshopThe DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or...9.8 Critical
- woocommerceThe logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable...8.1 High
- shopwareShopware SQL Injection8.8 High
- limesurveyLimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to...6.1 Medium
- shopwareShopware XXE Vulnerability6.5 Medium
- woocommerceIn the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after...8.8 High
- fedoraproject sssd, debian linux, fedoraproject fedora +2 more +4 moreA vulnerability was found in sssd. If a user was configured with no home directory set, sssd...4.1 Medium
- skymoonlabs cleantoCleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.9.8 Critical
- skymoonlabs cleantoCleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.9.8 Critical
- easycmsAn issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert...8.8 High
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +3 more +5 moreA memory corruption issue was addressed with improved memory handling. This issue affected...8.8 High
- apple icloud, itunes, safari +3 more +5 moreA memory corruption issue was addressed with improved memory handling. This issue affected...8.8 High
- apple icloud, itunes, safari +3 more +5 moreA memory corruption issue was addressed with improved memory handling. This issue affected...8.8 High
- apple icloud, itunes, safari +3 more +5 moreA logic issue existed resulting in memory corruption. This was addressed with improved state...8.8 High
- dedecmsuploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute...8.8 High
systemdDebiansystemd - regression updateNo score- westes flexAn issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is...5.5 Medium
- yaml-cpp project yaml-cppAn issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack...6.5 Medium
- nasm netwide assemblerAn issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14...5.5 Medium
- nasm netwide assemblerAn infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02....5.5 Medium
- premiumwpsuite easy redirect managerThe Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted...6.1 Medium
- gnu binutilsA heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU...6.5 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial...6.5 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions...3.5 Low
- sass-lang libsassIn LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in...6.5 Medium
- yaml-cpp project yaml-cppThe SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows...6.5 Medium
- sass-lang libsassIn LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in...6.5 Medium
- sass-lang libsassIn LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in...6.5 Medium
- systemd, canonical ubuntu linux, netapp active iq performance analytics services +2 more +4 moreIt was discovered systemd does not correctly check the content of PIDFile files before using it...4.4 Medium
- jpressXSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option.5.4 Medium
- etcd, fedoraproject fedora, redhat enterprise linux desktop +3 more +5 morego.etcd.io/etcd Authentication Bypass6.8 Medium
- icmsdev icmsAn issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article...9.8 Critical
- ibm security identity managerIBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous...9.0 Critical
- ibm security identity managerIBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm security identity managerIBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by...5.9 Medium
- std42 elfinderelFinder Server Side Request Forgery (SSRF)7.7 High
- live555 media server, debian linux +1 moreA Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in...9.8 Critical
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreWebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon...8.1 High
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...5.9 Medium
- Show moreLoading…