CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- duraspace vitroCommand Injection in VIVO Vitro7.5 High
- debian linux, systemd, redhat enterprise linux desktop +5 more +7 moreA memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise...3.3 Low
- foxitsoftware 3dAn issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and...8.8 High
- foxitsoftware 3dAn issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and...6.5 Medium
- foxitsoftware 3dAn issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and...6.5 Medium
- foxitsoftware 3dAn issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and...5.5 Medium
- ip history logs project history logsAn issue was discovered in the User IP History Logs (aka IP_History_Logs) plugin 1.0.2 for MyBB....6.1 Medium
- yiiframework yiiYii Incorrectly Implements CORS5.9 Medium
- go cors project corsgithub.com/gofiber/fiber/v2 vulnerable to Origin Validation Error5.9 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreAn issue was discovered in elfutils 0.175. A segmentation fault can occur in the function...5.5 Medium
- elfutils project elfutils, debian linux +1 moreA heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c...6.5 Medium
- libgd, canonical ubuntu linux, debian linux +2 moreThe GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in...9.8 Critical
- coturnAn exploitable unsafe default configuration vulnerability exists in the TURN server function of...6.5 Medium
- coturnAn exploitable unsafe default configuration vulnerability exists in the TURN server functionality...7.7 High
- coturn, debian linux +1 moreAn exploitable SQL injection vulnerability exists in the administrator web portal function of...9.1 Critical
- cephCeph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the...5.5 Medium
- calmar-webmedia total donationsIncorrect access control in migla_ajax_functions.php in the Calmar Webmedia Total Donations...9.8 Critical
- libvipslibvips before 8.7.4 generates output images from uninitialized memory locations when processing...5.3 Medium
- phpmyadmin, debian linux +1 morephpMyAdmin Arbitrary file read vulnerability5.9 Medium
- phpmyadminphpMyAdmin SQL injection in Designer feature9.8 Critical
- libgd, php, canonical ubuntu linux +2 more +4 moregdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in...8.8 High
- axiosys bento4An issue was discovered in Bento4 1.5.1-628. The AP4_ElstAtom class in Core/Ap4ElstAtom.cpp has...6.5 Medium
- hetronic nova-m, bms-hl firmware, dc mobile firmware +3 more +5 moreHetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re...8.8 High
- emerson deltavA specially crafted script could bypass the authentication of a maintenance port of Emerson...6.5 Medium
- pilz pnozmulti configuratorPilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local...7.8 High
- rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 moreA denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...5.3 Medium
- audiocoding freeware advanced audio decoder 2, debian linux +1 moreAn issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over...7.1 High
- mumble, debian linux +1 moremurmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that...7.5 High
- s-cmsSQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php O_id parameter.9.8 Critical
- pagerduty rundeckRundeck Community Edition vulnerable to Cross-site Scripting6.1 Medium
- typoratypora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left...6.1 Medium
- postgis, debian linux +1 morePostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of...7.5 High
- python pypiserverCRLF Injection in pypiserver6.1 Medium
postgresql-9.4Debianpostgresql-9.4 - new upstream versionNo score- qemu, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreIn QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid...4.2 Medium
- lenovo synaptics thinkpad ultranav driver, thiankpad l430 firmware, thiankpad l530 firmware +57 more +59 moreIn some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of...7.8 High
- rockwellautomation factorytalk services platform, rockwell automation factorytalk services platform v2.90 and earlier +1 moreIn Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated...7.5 High
- symantec reporterThe Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an...7.2 High
- kaine wise chatThe Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters...6.1 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a...4.4 Medium
- symantec norton app lockNorton App Lock prior to 1.4.0.445 can be susceptible to a bypass exploit. In this type of...6.2 Medium
- chshcms cscmsCscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links.8.1 High
- ibm security identity managerIBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a...5.1 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability8.6 High
- cisco socialminerCisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability6.1 Medium
- cisco unified intelligence centerCisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability4.7 Medium
- cisco amp threat grid appliance, amp threat grid cloud, amp threat grid appliance software +2 moreCisco AMP Threat Grid API Key Information Disclosure Vulnerability4.3 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability5.3 Medium
- cisco webex meetings serverCisco Webex Meetings Server Cross-Site Scripting Vulnerability6.1 Medium
- Show moreLoading…