CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- castlamp zenbershipZenbership v107 has CSRF via admin/cp-functions/event-add.php.8.8 High
- s9y serendipitySerendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter.5.4 Medium
- wolfsslexamples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based...9.8 Critical
- hitachienergy relion 630 firmwareABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow...7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +10 more +12 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....7.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....6.5 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported...6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported...3.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- facebook hhvmThe implementations of streams for bz2 and php://output improperly implemented their readImpl...9.8 Critical
- facebook wangleWangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection,...5.9 Medium
- search autocomplete project autocomplete, drupal 3rd party module - search autocomplete +1 moreSearch Autocomplete6.1 Medium
- facebook hhvmThe function number_format is vulnerable to a heap overflow issue when its second argument (...9.8 Critical
- drupal, drupal core +1 moreFile REST resource does not properly validate5.9 Medium
- juniper networks atp, juniper advanced threat prevention firmware +1 moreJuniper ATP: Password hashing uses DES and a hardcoded salt6.7 Medium
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Splunk credentials are in logged in clear text8.8 High
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration5.4 Medium
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration5.4 Medium
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu5.4 Medium
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu5.4 Medium
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu5.4 Medium
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software.10.0 Critical
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text7.1 High
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Hard coded credentials used in Web Collector10.0 Critical
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu5.4 Medium
- juniper junos spaceJunos Space: Unrestricted file upload vulnerability6.5 Medium
- juniper junos spaceJunos Space: Authenticated user able to delete devices without delete device privileges6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot5.4 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD crash upon receipt of malformed PIM packet6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: rpd crash on VPLS PE upon receipt of specific BGP message7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: vMX series: Predictable IP ID sequence numbers vulnerability9.3 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration9.8 Critical
- juniper junosOn EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform...5.3 Medium
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: API and device keys are logged in a world-readable permissions file7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect5.8 Medium
- Show moreLoading…