Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
January

CVEs published in January 2019

1,173 vulnerabilities, 147 critical, 5 exploited.

Known exploitedIn KEVPublic exploitFix available

libraw, debian linux +1 moreAn error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions...CVE-2018-5818Fix available7.5 HighJanuary 18, 2019
flexera software llc libraw, debian linux +1 moreA type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to...CVE-2018-5817Fix available7.5 HighJanuary 18, 2019
openbsd openssh, netapp element software, ontap select deploy +7 more +9 moreIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...CVE-2019-6110Public exploitEPSS 24.9%6.8 MediumJanuary 18, 2019
tp-link tl-wdr3500 firmware, tl-wdr3600 firmware, tl-wdr4300 firmware +2 more +4 moreTP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command...CVE-2019-6487Public exploit8.8 HighJanuary 18, 2019
python, debian linux, opensuse leap +4 more +6 moreAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...CVE-2019-5010Public exploitFix availableEPSS 20.7%5.9 MediumJanuary 18, 2019
apache subversion, canonical ubuntu linux +1 moreSubversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash...CVE-2018-11803Fix availableEPSS 58.5%7.5 HighJanuary 18, 2019
bmc patrol agent** DISPUTED ** An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the...CVE-2018-20735Public exploitDisputed7.8 HighJanuary 17, 2019
microsoft team, team foundation server +1 moreAn information disclosure vulnerability exists when Team Foundation Server does not properly...CVE-2019-06476.5 MediumJanuary 17, 2019
microsoft team, team foundation server +1 moreA Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly...CVE-2019-06465.4 MediumJanuary 17, 2019
microsoft skype, skype for business +1 moreA spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize...CVE-2019-06245.4 MediumJanuary 17, 2019
nediA stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers...CVE-2018-207316.1 MediumJanuary 17, 2019
nediA SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read...CVE-2018-207307.5 HighJanuary 17, 2019
nediA reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote...CVE-2018-207296.1 MediumJanuary 17, 2019
nediA cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers...CVE-2018-207288.8 HighJanuary 17, 2019
nediMultiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to...CVE-2018-207278.8 HighJanuary 17, 2019
sas web infrastructure platformBI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.CVE-2018-207337.5 HighJanuary 17, 2019
sas web infrastructure platformSAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code...CVE-2018-207329.8 CriticalJanuary 17, 2019
sas web infrastructure platformLogon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout...CVE-2015-92816.1 MediumJanuary 17, 2019
tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Authentication VulnerabilityCVE-2018-188148.8 HighJanuary 16, 2019
tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Reflected and Persistent Cross-Site Scripting VulnerabilitiesCVE-2018-188138.8 HighJanuary 16, 2019
tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +1 more +3 moreTIBCO Spotfire Fails To Prevent Write Access to Spotfire LibraryCVE-2018-188126.5 MediumJanuary 16, 2019
isc bind, bind 9 +1 moreUpdate policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentationCVE-2018-5741Fix available6.5 MediumJanuary 16, 2019
isc kea, kea dhcp +1 moreFailure to release memory may exhaust system resourcesCVE-2018-57396.5 MediumJanuary 16, 2019
isc bind, bind 9, netapp cloud backup +1 more +3 moreBIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.CVE-2018-5737Fix availableEPSS 10.6%5.9 MediumJanuary 16, 2019
isc bind, netapp cloud backup, data ontap edge +2 moreAn error in zone database reference counting can lead to an assertion failure if a server which...CVE-2018-5736Public exploitFix availableEPSS 18.0%5.3 MediumJanuary 16, 2019
isc bind, bind 9, netapp data ontap edge +1 more +3 moreA malformed request can trigger an assertion failure in badcache.cCVE-2018-57347.5 HighJanuary 16, 2019
dell rsa authentication manager, rsa authentication manager +1 moreDSA-2018-226: RSA® Authentication Manager Relative Path Traversal VulnerabilityCVE-2018-157827.7 HighJanuary 16, 2019
isc bind, bind 9 +1 moreWindows service and uninstall paths are not quoted when BIND is installedCVE-2017-3141Public exploitFix available7.2 HighJanuary 16, 2019
isc bind, bind 9, netapp data ontap edge +2 more +4 moreAn error processing RPZ rules can cause named to loop endlessly after handling a queryCVE-2017-3140Fix availableEPSS 12.2%3.7 LowJanuary 16, 2019
oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...CVE-2019-2556Fix available6.5 MediumJanuary 16, 2019
oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...CVE-2019-2555Fix available6.5 MediumJanuary 16, 2019
oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...CVE-2019-2554Fix available6.5 MediumJanuary 16, 2019
oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...CVE-2019-2553Fix available3.8 LowJanuary 16, 2019
oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...CVE-2019-2552Fix available8.8 HighJanuary 16, 2019
oracle flexcube direct bankingVulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services...CVE-2019-25504.3 MediumJanuary 16, 2019
oracle flexcube direct bankingVulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services...CVE-2019-25496.1 MediumJanuary 16, 2019
oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...CVE-2019-2548Fix available7.8 HighJanuary 16, 2019
oracle database server, oracle corporation database +1 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...CVE-2019-25473.5 LowJanuary 16, 2019
manageengine applications manager, oracle e-business suite +1 moreVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2019-25464.3 MediumJanuary 16, 2019
oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent:...CVE-2019-25454.0 MediumJanuary 16, 2019
oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent:...CVE-2019-25444.0 MediumJanuary 16, 2019
oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent:...CVE-2019-25435.3 MediumJanuary 16, 2019
oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent:...CVE-2019-25417.5 HighJanuary 16, 2019
oracle java advanced management console, oracle corporation java +1 moreVulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent:...CVE-2019-25406.1 MediumJanuary 16, 2019
oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection)....CVE-2019-25394.9 MediumJanuary 16, 2019
oracle managed file transferVulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware ...CVE-2019-25387.1 HighJanuary 16, 2019
oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2019-25365.0 MediumJanuary 16, 2019
oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2019-25354.1 MediumJanuary 16, 2019
oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security :...CVE-2019-25336.5 MediumJanuary 16, 2019
oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-25304.9 MediumJanuary 16, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open