CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +9 more +11 moreIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 Medium
- princexmlPrinceXML, versions 10 and below, is vulnerable to XXE due to the lack of protection against...8.6 High
- freshrssMultiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow...6.1 Medium
- trustedfirmware trusted firmware-aARM Trusted Firmware-A allows information disclosure.5.3 Medium
- comodo unified threat management firewallWeb Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code...9.8 Critical
- titanhq spamtitanTitanHQ SpamTitan before 7.01 has Improper input validation. This allows internal attackers to...5.3 Medium
- open-xchange appsuiteOX App Suite 7.8.4 and earlier allows Directory Traversal.6.1 Medium
- open-xchange appsuiteOX App Suite 7.8.4 and earlier allows Information Exposure.5.3 Medium
- open-xchange appsuiteOX App Suite 7.8.4 and earlier allows Server-Side Request Forgery.6.5 Medium
- croogoCroogo vulnerable to Cross-site Scripting in title field4.8 Medium
- atutorA stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or...6.1 Medium
- croogoCroogo vulnerable to XSS in title field4.8 Medium
- croogoCroogo vulnerable to XSS in title field4.8 Medium
- croogoCroogo vulnerable to XSS in title field4.8 Medium
- croogoCroogo vulnerable to XSS in Blog field4.8 Medium
- idreamsoft icmsidreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir...9.8 Critical
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a...4.9 Medium
- tridium niagara, niagara enterprise security, niagara enterprise security 2.3u1, all versions prior to 2.3.118.6, niagara ax 3.8u4, all versions prior to 3.8.401.1, niagara 4.4u2, all versions prior to 4.4.93.40.2, and niagara 4.6, all versions prior to 4.6.96.28.4 +1 more +3 moreTridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all...5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that...5.3 Medium
- ibm datapower gatewayIBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2...5.3 Medium
- 3s-smart software solutions gmbh codesys control v3 products prior to version 3.5.14.0, codesys control for beaglebone sl, control for empc-a\/imx6 sl +10 more +12 moreIn 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user...9.8 Critical
- libdoc project libdocIn libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.6.5 Medium
- atlassian crowdVarious resources in Atlassian Crowd before version 2.10.1 allow remote attackers with...4.9 Medium
- webassembly binaryenThe main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow...6.5 Medium
- webassembly binaryenA NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm...6.5 Medium
- webassembly binaryenA heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in...6.5 Medium
- webassembly binaryenA NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in...6.5 Medium
- elfutils project elfutilsAn attempted excessive memory allocation was discovered in the function read_long_names in...6.5 Medium
- nasm netwide assemblerA buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler ...5.5 Medium
- elfutils project elfutilsIn elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in...5.5 Medium
- apache http server, canonical ubuntu linux, debian linux +3 more +5 moreIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 High
- linux kernel, canonical ubuntu linux +1 moreA flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A...5.9 Medium
- adobe acrobat dc, acrobat reader dc +1 moreAdobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and...7.5 High
- adobe acrobat dc, acrobat reader dc +1 moreAdobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and...6.5 Medium
- draeger delta xl firmware, infinity delta firmware, infinity explorer c700 firmware +2 more +4 moreDrager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version,...6.5 Medium
- draeger delta xl firmware, infinity delta firmware, infinity explorer c700 firmware +2 more +4 moreDrager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version,...6.5 Medium
- draeger delta xl firmware, infinity delta firmware, infinity explorer c700 firmware +2 more +4 moreDrager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version,...7.8 High
- zoneminderA stored-self XSS exists in web/skins/classic/views/controlcaps.php of ZoneMinder through 1.32.3,...6.1 Medium
- zoneminderA classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the...9.8 Critical
- zoneminderA stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3,...5.4 Medium
- ics-cert cx-supervisorAn attacker could inject commands to launch programs and create, write, and read files on CX...7.3 High
- red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 moreSpice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019...6.5 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting...6.1 Medium
- adobe experience manager forms, experience manager +1 moreAdobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting...6.1 Medium
- mcafee total protection, mcafee, llc total protection (mtp) +1 moreExploitation of Privilege/Trust vulnerability7.5 High
- uclouvain openjpegAn issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of...6.5 Medium
- Show moreLoading…