CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- oracle hospitality reporting and analyticsVulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and...6.1 Medium
- oracle databaseVulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are...7.2 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...7.5 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...5.3 Medium
- oracle hospitality simphonyVulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage...6.5 Medium
- oracle hospitality simphonyVulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage...7.7 High
- oracle hospitality reporting and analyticsVulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and...8.1 High
- oracle e-business suite, istore +1 moreVulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User...8.2 High
- oracle communications diameter signaling router, oracle corporation communications diameter signaling router (dsr) +1 moreVulnerability in the Oracle Communications Diameter Signaling Router (DSR) component of Oracle...6.5 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...4.3 Medium
- oracle hospitality reporting and analyticsVulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and...4.4 Medium
- oracle e-business suite, oracle corporation crm technical foundation +1 moreVulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite ...4.7 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...5.4 Medium
- oracle retail xstore payment, oracle corporation micros xstore payment +1 moreVulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications ...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.2 High
- oracle application testing suiteVulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager...6.3 Medium
- oracle application testing suiteVulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager...6.5 Medium
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager...6.5 Medium
- oracle retail merchandising systemVulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications ...6.5 Medium
- cairographics cairoAn issue was discovered in cairo 1.16.0. There is an infinite loop in the function...6.5 Medium
- cairographics cairoAn issue was discovered in cairo 1.16.0. There is an assertion problem in the function...6.5 Medium
- gnu recutilsAn issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function...6.5 Medium
- gnu recutilsAn issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec...6.5 Medium
- gnu recutilsAn issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c...6.5 Medium
- gnu recutilsAn issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in...6.5 Medium
- gnu recutilsAn issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function...6.5 Medium
- gnu recutilsAn issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function...6.5 Medium
- drupal, drupal core, debian linux +2 morePHAR stream wrapper Arbitrary PHP code execution9.8 Critical
- drupal, drupal core, debian linux +2 morethird-party PEAR Archive_Tar library updates8.0 High
- cactiA cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2...5.4 Medium
- cactiA cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0...4.8 Medium
- cactiA cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to...4.8 Medium
- cactiA cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0...4.8 Medium
- mailenableMailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.10.0 Critical
- mailenableMailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in...6.1 Medium
- mailenableMailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a...9.8 Critical
- mailenableMailEnable before 8.60 allows Directory Traversal for reading the messages of other users,...9.1 Critical
- smartertools smartermailSmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS...6.1 Medium
- estrongs es file explorer file managerThe ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote...8.1 High
- uriparser project uriparser, debian linux +1 moreURI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex*...9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in mod_banners leads to a...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration...4.8 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration...5.4 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in com_contact leads to a...6.1 Medium
- numpy, fedoraproject fedora +1 moreNumpy Deserialization of Untrusted Data9.8 Critical
- ntpsecAn issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL...6.5 Medium
- ntpsecAn issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack...9.1 Critical
- ntpsecAn issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack...9.1 Critical
- ntpsecAn issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out...6.5 Medium
- zemana antimalwareZemana AntiMalware before 3.0.658 Beta mishandles update logic.9.8 Critical
- Show moreLoading…