[US-CERT: Bulletin(SB19-049)] 2019년 2월 11일까지 발표된 보안 취약점

 

 

 

 

*** 출처: [US-CERT: Bulletin(SB19-049)] 2019년 2월 11일까지 발표된 보안 취약점

 

 

 

The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

• High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

• Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

• Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

 

High Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
abbyy -- flexicapture	Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter.	2019-02-09	7.5	CVE-2018-13792 CONFIRM
aveva -- indusoft_web_studio	AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine.	2019-02-12	10.0	CVE-2019-6543 MISC EXPLOIT-DB MISC
aveva -- indusoft_web_studio	AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server machine.	2019-02-12	10.0	CVE-2019-6545 MISC EXPLOIT-DB MISC
cim_project -- cim	install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a crafted prefix value because of configuration file mishandling in the N=83 case, as demonstrated by a call to the PHP fputs function that creates a .php file in the public folder.	2019-02-10	7.5	CVE-2019-7692 MISC
dlink -- dir-600m_firmware	D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page.	2019-02-11	7.5	CVE-2019-7736 MISC
dlink -- dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the twsystem function with untrusted input from the request body for the SetSysLogSettings API function, as demonstrated by shell metacharacters in the IPAddress field.	2019-02-12	9.0	CVE-2019-8312 MISC
dlink -- dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the twsystem function with untrusted input from the request body for the SetIPv6FirewallSettings API function, as demonstrated by shell metacharacters in the SrcIPv6AddressRangeStart field.	2019-02-12	9.0	CVE-2019-8313 MISC
dlink -- dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetQoSSettings API function, as demonstrated by shell metacharacters in the IPAddress field.	2019-02-12	9.0	CVE-2019-8314 MISC
dlink -- dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the twsystem function with untrusted input from the request body for the SetIPv4FirewallSettings API function, as demonstrated by shell metacharacters in the SrcIPv4AddressRangeStart field.	2019-02-12	9.0	CVE-2019-8315 MISC
dlink -- dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetWebFilterSettings API function, as demonstrated by shell metacharacters in the WebFilterURLs field.	2019-02-12	9.0	CVE-2019-8316 MISC
dlink -- dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the twsystem function with untrusted input from the request body for the SetSysEmailSettings API function, as demonstrated by shell metacharacters in the SMTPServerPort field.	2019-02-12	9.0	CVE-2019-8318 MISC
dlink -- dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteIPv4Settings API function, as demonstrated by shell metacharacters in the Gateway field.	2019-02-12	9.0	CVE-2019-8319 MISC
google -- android	In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Use-after-free issue in heap while loading audio effects config in audio effects factory.	2019-02-11	7.2	CVE-2018-11962 BID CONFIRM
google -- android	In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT module of freed pointer.	2019-02-11	7.2	CVE-2018-12014 BID CONFIRM
google -- android	In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory was accessed after it was freed	2019-02-11	7.2	CVE-2018-13889 BID CONFIRM
google -- android	NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that can affect the control flow or data flow of a program, which may lead to denial of service or escalation of privileges. Android ID: A-70857947.	2019-02-13	9.3	CVE-2018-6267 BID CONFIRM
google -- android	NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial of service or possible escalation of privileges. Android ID: A-80433161.	2019-02-13	9.3	CVE-2018-6268 BID CONFIRM
google -- android	NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not properly validated the extra data, which may lead to denial of service or escalation of privileges. Android ID: A-80198474.	2019-02-13	9.3	CVE-2018-6271 BID CONFIRM
google -- android	In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-112860487.	2019-02-11	10.0	CVE-2018-9583 BID CONFIRM
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism (such as the TYPO3 PHAR stream wrapper) to prevent use of the phar:// handler for non .phar-files.	2019-02-12	7.5	CVE-2019-7743 BID MISC
mobotix -- s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of meinsm for the admin account.	2019-02-09	10.0	CVE-2009-5154 MISC MISC
mywebsql -- mywebsql	MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file.	2019-02-11	7.5	CVE-2019-7731 MISC
nibbleblog -- nibbleblog	Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request.	2019-02-10	7.5	CVE-2019-7719 MISC
pocoo -- jinja2	An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI.	2019-02-15	7.5	CVE-2019-8341 MISC EXPLOIT-DB
qualcomm -- mdm9206_firmware	There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, ZZ_QCS605.	2019-02-11	7.2	CVE-2018-13888 BID CONFIRM
qualcomm -- mdm9607_firmware	Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439, Snapdragon_High_Med_2016.	2019-02-11	7.2	CVE-2018-11888 BID CONFIRM
taogogo -- taocms	taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.	2019-02-10	7.5	CVE-2019-7720 MISC
traq -- traq	Traq 3.7.1 allows SQL Injection via a tickets?search= URI.	2019-02-10	7.5	CVE-2018-20779 MISC
we-con -- levistudiou	Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.	2019-02-12	9.3	CVE-2019-6539 BID MISC
webassembly -- binaryen	An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed assertion and crash) via a crafted wasm file.	2019-02-09	7.1	CVE-2019-7662 MISC

Back to top

 

Medium Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
abb -- cp400pb_firmware	The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertion of specially crafted files which could allow arbitrary code execution.	2019-02-13	6.8	CVE-2018-19008 BID MISC
apache -- jspwiki	A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.	2019-02-11	4.3	CVE-2018-20242 BID MLIST
atlassian -- confluence	Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature.	2019-02-13	4.0	CVE-2018-20237 BID CONFIRM
atlassian -- crowd	Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authenticate using an expired user session via an insufficient session expiration vulnerability.	2019-02-13	5.5	CVE-2018-20238 BID CONFIRM
atto -- fibrebridge_7500n_firmware	ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial of Service (DoS).	2019-02-12	5.0	CVE-2018-5499 CONFIRM
axiositalia -- registro_elettronico	Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete (con server)" for offline operation.	2019-02-10	4.3	CVE-2019-7693 MISC MISC
axiosys -- bento4	An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter::Action in Core/Ap4Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42hls.	2019-02-10	4.3	CVE-2019-7697 MISC
axiosys -- bento4	An issue was discovered in AP4_Array<AP4_CttsTableEntry>::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095.	2019-02-10	4.3	CVE-2019-7698 MISC
axiosys -- bento4	A heap-based buffer over-read occurs in AP4_BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 v1.5.1-627. Remote attackers could leverage this vulnerability to cause an exception via crafted mp4 input, which leads to a denial of service.	2019-02-10	4.3	CVE-2019-7699 MISC
beescms -- beescms	BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI.	2019-02-15	6.8	CVE-2019-8347 MISC
dbninja -- dbninja	DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.	2019-02-11	6.8	CVE-2019-7747 MISC
dbninja -- dbninja	_includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists.	2019-02-11	4.3	CVE-2019-7748 MISC
elfutils_project -- elfutils	In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).	2019-02-09	4.3	CVE-2019-7664 MISC
elfutils_project -- elfutils	In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes.	2019-02-09	4.3	CVE-2019-7665 MISC MISC
enigmail -- enigmail	Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.	2019-02-11	4.3	CVE-2018-15586 MISC
estrongs -- es_file_explorer_file_manager	The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL.	2019-02-15	4.3	CVE-2019-8345 MISC
f5 -- big-ip_access_policy_manager	On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS) vulnerability is present in an undisclosed page of the BIG-IP TMUI (Traffic Management User Interface) also known as the BIG-IP configuration utility.	2019-02-13	4.3	CVE-2019-6589 CONFIRM
frog_cms_project -- frog_cms	Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.	2019-02-10	6.5	CVE-2018-20772 MISC
frog_cms_project -- frog_cms	Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.	2019-02-10	6.5	CVE-2018-20773 MISC
frog_cms_project -- frog_cms	admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.	2019-02-10	6.5	CVE-2018-20775 MISC
frog_cms_project -- frog_cms	Frog CMS 0.9.5 provides a directory listing for a /public request.	2019-02-10	5.0	CVE-2018-20776 MISC
frog_cms_project -- frog_cms	admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.	2019-02-10	4.3	CVE-2018-20778 MISC
gnome -- evolution	GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.	2019-02-11	4.3	CVE-2018-15587 MISC
google -- android	In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corruption in trustzone region.	2019-02-11	4.6	CVE-2018-12010 CONFIRM
google -- android	In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count while copying masks to userspace.	2019-02-11	4.6	CVE-2018-13893 CONFIRM
google -- android	In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused deputy scenario. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-112031362.	2019-02-11	4.6	CVE-2018-9582 BID CONFIRM
google -- android	In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-114047681.	2019-02-11	4.6	CVE-2018-9584 BID CONFIRM
google -- android	In nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-117554809.	2019-02-11	4.6	CVE-2018-9585 BID CONFIRM
google -- android	In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, it is possible that package verification is turned off and remains off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116754444.	2019-02-11	4.4	CVE-2018-9586 BID CONFIRM
google -- android	In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible unauthorized access to files within the contact app due to a confused deputy scenario. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Android ID: A-113597344.	2019-02-11	4.4	CVE-2018-9587 BID CONFIRM
google -- android	In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-115900043.	2019-02-11	5.0	CVE-2018-9590 BID CONFIRM
google -- android	In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116108738.	2019-02-11	5.0	CVE-2018-9591 BID CONFIRM
google -- android	In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116319076.	2019-02-11	5.0	CVE-2018-9592 BID CONFIRM
hotels_server_project -- hotels_server	controller/fetchpwd.php and controller/doAction.php in Hotels_Server through 2018-11-05 rely on base64 in an attempt to protect password storage.	2019-02-08	5.0	CVE-2019-7648 MISC
housegate -- house_gate	Directory traversal vulnerability in HOUSE GATE App for iOS 1.7.8 and earlier allows remote attackers to read arbitrary files via unspecified vectors.	2019-02-13	5.0	CVE-2019-5910 JVN
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.3. The "No Filtering" textfilter overrides child settings in the Global Configuration. This is intended behavior. However, it might be unexpected for the user because the configuration dialog lacks an additional message to explain this.	2019-02-12	4.3	CVE-2019-7739 BID MISC
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code (core.js writeDynaList) could lead to an XSS attack vector.	2019-02-12	4.3	CVE-2019-7740 MISC
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.3. Inadequate checks at the Global Configuration helpurl settings allowed stored XSS.	2019-02-12	4.3	CVE-2019-7741 MISC
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.3. A combination of specific web server configurations, in connection with specific file types and browser-side MIME-type sniffing, causes an XSS attack vector.	2019-02-12	4.3	CVE-2019-7742 MISC
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.3. Inadequate filtering on URL fields in various core components could lead to an XSS vulnerability.	2019-02-12	4.3	CVE-2019-7744 MISC
lexmark -- 6500e_firmware	Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.	2019-02-11	6.4	CVE-2019-6489 CONFIRM
libtiff -- libtiff	An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.	2019-02-09	4.3	CVE-2019-7663 MISC MLIST
linux -- linux_kernel	In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.	2019-02-15	5.8	CVE-2019-6974 MISC MISC MISC MISC MISC MISC MISC EXPLOIT-DB
live555 -- streaming_media	In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.	2019-02-11	5.0	CVE-2019-7732 MISC
live555 -- streaming_media	In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove.	2019-02-11	5.0	CVE-2019-7733 MISC
metinfo -- metinfo	An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=<?php and admin/databack/bakup_tables.php?2=file_put_contents URIs because app/system/databack/admin/index.class.php creates bakup_tables.php temporarily.	2019-02-10	6.8	CVE-2019-7718 MISC
mobotix -- s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.	2019-02-09	5.0	CVE-2019-7673 MISC
mobotix -- s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.	2019-02-09	5.0	CVE-2019-7674 MISC
mobotix -- s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI.	2019-02-09	5.0	CVE-2019-7675 MISC
mywebsql -- mywebsql	MyWebSQL 3.7 has a Cross-site request forgery (CSRF) vulnerability for deleting a database via the /?q=wrkfrm&type=databases URI.	2019-02-11	4.9	CVE-2019-7730 MISC
nasm -- netwide_assembler	In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.	2019-02-15	6.8	CVE-2019-8343 MISC
nconsulting -- nc-cms	lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters.	2019-02-10	5.0	CVE-2019-7721 MISC
nttdocomo -- v20_pro_l-01j_firmware	V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same network range via a specially crafted access point.	2019-02-13	5.7	CVE-2019-5914 JVN MISC
omron -- cx-supervisor	An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.	2019-02-12	6.0	CVE-2018-19018 MISC
qualcomm -- mdm9206_firmware	While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.	2019-02-11	4.6	CVE-2018-11899 CONFIRM
rarlab -- winrar	In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.	2019-02-12	6.8	CVE-2018-20253 MISC
schoolcms -- schoolcms	An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=[XSS].	2019-02-13	4.3	CVE-2019-8334 MISC
schoolcms -- schoolcms	An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=[XSS].	2019-02-13	4.3	CVE-2019-8335 MISC
symantec -- ghost_solution_suite	Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application.	2019-02-08	6.0	CVE-2018-18364 BID CONFIRM
traq -- traq	Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).	2019-02-10	6.8	CVE-2018-20780 MISC
verydows -- verydows	A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit.	2019-02-11	6.8	CVE-2019-7737 MISC
verydows -- verydows	Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.	2019-02-12	4.3	CVE-2019-7753 MISC
we-con -- levistudiou	A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.	2019-02-12	6.8	CVE-2019-6541 BID MISC
webassembly -- binaryen	A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-merge.	2019-02-10	4.3	CVE-2019-7700 MISC
webassembly -- binaryen	A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm2js.	2019-02-10	4.3	CVE-2019-7701 MISC
webassembly -- binaryen	A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.	2019-02-10	4.3	CVE-2019-7702 MISC
webassembly -- binaryen	In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a wasm file, as demonstrated by wasm-merge.	2019-02-10	4.3	CVE-2019-7703 MISC
webassembly -- binaryen	wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt.	2019-02-10	4.3	CVE-2019-7704 MISC

Back to top

 

Low Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
atlassian -- jira	The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.12.4, and from version 7.13.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a saved filter when displayed on a Jira dashboard.	2019-02-13	3.5	CVE-2018-13403 CONFIRM
atlassian -- jira	The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the rendering of retrieved content from a url location that could be manipulated by the up_projectid widget preference setting.	2019-02-13	3.5	CVE-2018-20232 BID CONFIRM
cisco -- identity_services_engine	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some parameters passed to the web-based management interface. An attacker could exploit this vulnerability by convincing a user of the interface to click a specific link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. For information about fixed software releases, consult the Cisco bug ID at https://quickview.cloudapps.cisco.com/quickview/bug/CSCvn64652. When considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories and Alerts page, to determine exposure and a complete upgrade solution.	2019-02-08	3.5	CVE-2019-1673 BID CISCO
frog_cms_project -- frog_cms	Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.	2019-02-10	3.5	CVE-2018-20774 MISC
frog_cms_project -- frog_cms	Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.	2019-02-10	3.5	CVE-2018-20777 MISC
google -- android	In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Users with no extra privileges can potentially access leaked data due to uninitialized padding present in display function.	2019-02-11	2.1	CVE-2018-12006 CONFIRM
google -- android	In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized data for socket address leads to information exposure.	2019-02-11	2.1	CVE-2018-12011 CONFIRM
google -- android	In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-111450156.	2019-02-11	3.3	CVE-2018-9588 BID CONFIRM
google -- android	In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi driver with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-111893132.	2019-02-11	2.1	CVE-2018-9589 BID CONFIRM
google -- android	In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116722267.	2019-02-11	3.3	CVE-2018-9593 BID CONFIRM
google -- android	In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116791157.	2019-02-11	3.3	CVE-2018-9594 BID CONFIRM
mcafee -- true_key	Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key (TK) 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware.	2019-02-13	2.1	CVE-2019-3610 CONFIRM
omron -- cx-supervisor	When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array.	2019-02-12	3.5	CVE-2018-19020 MISC
sap -- business_one	Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information which would otherwise be restricted.	2019-02-15	2.1	CVE-2019-0256 BID MISC MISC
tenable -- nessus	Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input. An authenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a user's browser session. Tenable has released Nessus 8.2.2 to address this issue.	2019-02-11	3.5	CVE-2019-3923 CONFIRM

Back to top

 

Severity Not Yet Assigned

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
advancecomp -- advancecomp	An issue was discovered in AdvanceCOMP before 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.	2019-02-16	not yet calculated	CVE-2019-8383 MISC MISC
advancecomp -- advancecomp	An issue was discovered in AdvanceCOMP before 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.	2019-02-16	not yet calculated	CVE-2019-8379 MISC MISC
amazon -- fire_os	Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages.	2019-02-16	not yet calculated	CVE-2019-7399 BID MISC
atlassian -- jira	The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from version 7.12.0 before version 7.12.3, and from version 7.13.0 before version 7.13.1 allows remote attackers who have administrator rights to determine the existence of internal hosts & open ports and in some cases obtain service information from internal network resources via a Server Side Request Forgery (SSRF) vulnerability.	2019-02-13	not yet calculated	CVE-2018-13404 CONFIRM
bento4 -- bento4	An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sending a crafted file to the mp4dump binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	not yet calculated	CVE-2019-8382 MISC MISC
bento4 -- bento4	An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track::GetSampleIndexForTimeStampMs() located in Core/Ap4Track.cpp. It can triggered by sending a crafted file to the mp4audioclip binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	not yet calculated	CVE-2019-8380 MISC MISC
bento4 -- bento4	An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4_BitStream::ReadBytes() in Codecs/Ap4BitStream.cpp, a similar issue to CVE-2017-14645. It can be triggered by sending a crafted file to the aac2mp4 binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	not yet calculated	CVE-2019-8378 MISC MISC
bitcoin -- bitcoin_core_and_bitcoin_knots	Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port.	2019-02-11	not yet calculated	CVE-2018-20587 MISC MISC
c.p.sub_project -- c.p.sub	C.P.Sub before 5.3 allows CSRF via a manage.php?p=article_del&id= URI.	2019-02-11	not yet calculated	CVE-2019-7738 MISC MISC
cisco -- meeting_server	A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient validation of Session Description Protocol (SDP) messages. An attacker could exploit this vulnerability by sending a crafted SDP message to the CMS call bridge. An exploit could allow the attacker to cause the CMS to reload, causing a DoS condition for all connected clients. Versions prior to 2.3.9 are affected.	2019-02-08	not yet calculated	CVE-2019-1676 BID CISCO
cisco -- network_assurance_engine	A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service (DoS) condition on the server. The vulnerability is due to a fault in the password management system of NAE. An attacker could exploit this vulnerability by authenticating with the default administrator password via the CLI of an affected server. A successful exploit could allow the attacker to view potentially sensitive information or bring the server down, causing a DoS condition. This vulnerability affects Cisco Network Assurance Engine (NAE) Release 3.0(1). The default password condition only affects new installations of Release 3.0(1).	2019-02-12	not yet calculated	CVE-2019-1688 BID CISCO
cloud_foundry -- credhub_cli	Cloud Foundry CredHub CLI, versions prior to 2.2.1, inadvertently writes authentication credentials provided via environment variables to its persistent config file. A local authenticated malicious user with access to the CredHub CLI config file can use these credentials to retrieve and modify credentials stored in CredHub that are authorized to the targeted user.	2019-02-13	not yet calculated	CVE-2019-3782 BID CONFIRM
d-circle -- power_egg	Input validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2.3 Patch 9 and earlier, Ver 2.4 Patch 13 and earlier, Ver 2.5 Patch 12 and earlier, Ver 2.6 Patch 8 and earlier, Ver 2.7 Patch 6 and earlier, Ver 2.7 Government Edition Patch 7 and earlier, Ver 2.8 Patch 6 and earlier, Ver 2.8c Patch 5 and earlier, Ver 2.9 Patch 4 and earlier) allows remote attackers to execute EL expression on the server via unspecified vectors.	2019-02-13	not yet calculated	CVE-2019-5916 JVN MISC
d-link -- dir-823g_devices	An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to the web service provided by /bin/goahead.	2019-02-16	not yet calculated	CVE-2019-8392 MISC
d-link -- dir-878_devices	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteIPv6Settings API function, as demonstrated by shell metacharacters in the DestNetwork field.	2019-02-12	not yet calculated	CVE-2019-8317 MISC
dedecms -- dedecms	DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a dede/album_edit.php?dopost=save&formzip=1 request with a ZIP archive that contains a file such as "1.jpg.php" (because input validation only checks that .jpg, .png, or .gif is present as a substring, and does not otherwise check the file name or content).	2019-02-16	not yet calculated	CVE-2019-8362 MISC
dell -- wyse_password_encoder	The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decrypt locally stored cipher text.	2019-02-13	not yet calculated	CVE-2018-15781 MISC
django -- django	Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.	2019-02-11	not yet calculated	CVE-2019-6975 BID MISC MISC UBUNTU MISC MISC
dundas_data_visualization -- dundas_bi	The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests (with certain restrictions) that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. This could be leveraged to provide a proxy to attack other servers (internal or external) or to perform network scans of external or internal networks.	2019-02-11	not yet calculated	CVE-2018-18569 MISC
eclipse -- openj9	In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the allocated buffer. This functions were not directly callable by non-native user code.	2019-02-11	not yet calculated	CVE-2018-12547 CONFIRM
eclipse -- openj9	In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.	2019-02-11	not yet calculated	CVE-2018-12549 CONFIRM
enphase_energy -- envoy	XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.	2019-02-09	not yet calculated	CVE-2019-7677 MISC MISC
enphase_energy -- envoy	A directory traversal vulnerability was discovered in Enphase Envoy R3.*.* via images/, include/, include/js, or include/css on TCP port 8888.	2019-02-09	not yet calculated	CVE-2019-7678 MISC MISC
flatpak -- flatpak	Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.	2019-02-12	not yet calculated	CVE-2019-8308 MISC MISC MISC
freebsd -- freebsd	In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference count implementation for UNIX domain sockets can cause a file structure to be incorrectly released potentially allowing a malicious local user to gain root privileges or escape from a jail.	2019-02-12	not yet calculated	CVE-2019-5596 FREEBSD
freebsd -- freebsd	In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from system calls, potentially allowing some kernel data used in the system call to be exposed.	2019-02-12	not yet calculated	CVE-2019-5595 FREEBSD
genivia -- gsoap	Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag.	2019-02-09	not yet calculated	CVE-2019-7659 CONFIRM
gnome -- keyring	In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext.	2019-02-12	not yet calculated	CVE-2018-20781 MISC MISC MISC MISC
hgiga -- oaklouds_mailsherlock	SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi request.	2019-02-11	not yet calculated	CVE-2018-17542 CONFIRM CONFIRM
hiawatha -- hiawatha	In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled.	2019-02-16	not yet calculated	CVE-2019-8358 CONFIRM
ibm -- qradar_siem	IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134177.	2019-02-15	not yet calculated	CVE-2017-1695 XF CONFIRM
ibm -- infosphere_information_server	IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152159.	2019-02-15	not yet calculated	CVE-2018-1895 CONFIRM XF
ibm -- infosphere_information_server	IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the WebSphere Application Server. IBM X-Force ID: 145970.	2019-02-15	not yet calculated	CVE-2018-1701 XF CONFIRM
ibm -- infosphere_information_server	IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147630.	2019-02-15	not yet calculated	CVE-2018-1727 XF CONFIRM
ibm -- rational_clearcase	IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583.	2019-02-15	not yet calculated	CVE-2019-4059 XF CONFIRM
jforum -- jforum	In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username that exists, then an "is already in use" error is produced. NOTE: this product is discontinued.	2019-02-12	not yet calculated	CVE-2019-7550 MISC
kunbus -- pr100088_modbus_gateway	An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) through FTP.	2019-02-12	not yet calculated	CVE-2019-6549 MISC
kunbus -- pr100088_modbus_gateway	Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).	2019-02-12	not yet calculated	CVE-2019-6533 MISC
kunbus -- pr100088_modbus_gateway	PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.	2019-02-12	not yet calculated	CVE-2019-6527 MISC
mailmate -- mailmate	MailMate before 1.11.3 mishandles a suspicious HTML/MIME structure in a signed/encrypted email.	2019-02-11	not yet calculated	CVE-2018-15588 MISC
mambo -- cms	A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.	2019-02-15	not yet calculated	CVE-2013-2565 MISC MISC
micco -- lhmelting	Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	2019-02-13	not yet calculated	CVE-2019-5913 JVN MISC
micco -- unarj32.dll	Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	2019-02-13	not yet calculated	CVE-2019-5912 JVN MISC
micco -- unlha32.dll	Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	2019-02-13	not yet calculated	CVE-2019-5911 JVN MISC
micco -- unlha32.dll	Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	2019-02-13	not yet calculated	CVE-2018-16189 JVN MISC
micco --  unlha32.dll_and_unarj32.dll_and_lhmelting_and_lmlzh32.dll	Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	2019-02-13	not yet calculated	CVE-2018-16190 JVN MISC MISC MISC MISC
micro_focus -- solutions_business_manager	An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.	2019-02-12	not yet calculated	CVE-2018-19645 CONFIRM
msmtp -- msmtp	In msmtp 1.8.2, when tls_trust_file has its default configuration, certificate-verification results are not properly checked.	2019-02-13	not yet calculated	CVE-2019-8337 CONFIRM
multiple_vendors -- runc	runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.	2019-02-11	not yet calculated	CVE-2019-5736 BID REDHAT REDHAT MISC MISC MISC MISC MISC MISC MISC MISC MISC MISC MISC MISC EXPLOIT-DB EXPLOIT-DB MISC MISC
musicloud -- musicloud	A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder (with a crafted ../ payload) to the download.script endpoint. This will create a MusicPlayerArchive.zip archive that is publicly accessible and includes the content of any requested file (such as the /etc/passwd file).	2019-02-16	not yet calculated	CVE-2019-8389 MISC
open_source_solution_technology_corporation_and_ogis-ri -- openam	Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.	2019-02-13	not yet calculated	CVE-2019-5915 JVN MISC MISC
open_source_solution_technology_corporation_and_ogis-ri -- openam	OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.	2019-02-13	not yet calculated	CVE-2018-0696 JVN MISC MISC
phpscriptsmall.com -- responsive_video_news_script	PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection.	2019-02-16	not yet calculated	CVE-2019-8361 MISC MISC
pmd -- pmd	PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it (either by direct modification or MITM attacks when using remote rulesets) to perform information disclosure, denial of service, or request forgery attacks. (PMD 6.x is unaffected because of a 2017-09-15 change.)	2019-02-11	not yet calculated	CVE-2019-7722 MISC
qualcomm -- snapdragon	If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and Snapdragon Mobile in versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM630, SDM660.	2019-02-11	not yet calculated	CVE-2018-11855 CONFIRM
qualcomm -- snapdragon	Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables and Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439 and Snapdragon_High_Med_2016	2019-02-11	not yet calculated	CVE-2018-11847 BID CONFIRM
rubygems -- fileutils	Vulnerability in FileUtils v0.7, Ruby Gem Fileutils <= v0.7 Command Injection vulnerability in user supplied url variable that is passed to the shell.	2019-02-15	not yet calculated	CVE-2013-2516 MISC MISC
sap -- abap_platform	SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49,KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49. 7.73 KERNEL from 7.21 to 7.22, 7.45, 7.49, 7.53, 7.73, 7.75.	2019-02-15	not yet calculated	CVE-2019-0265 BID MISC MISC
sap -- businessobjects	SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without proper file format validation.	2019-02-15	not yet calculated	CVE-2019-0259 BID MISC MISC
sap -- disclosure_management	SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.	2019-02-15	not yet calculated	CVE-2019-0258 BID MISC MISC
sap -- disclosure_management	SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.	2019-02-15	not yet calculated	CVE-2019-0254 BID MISC MISC
sap -- fiori_launchpad	The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.	2019-02-15	not yet calculated	CVE-2019-0251 BID MISC MISC
sap -- hana_extended_application_services	Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace file of the SAP HANA system. Even though this trace file is protected from unauthorized access, the risk of leaking information is increased.	2019-02-15	not yet calculated	CVE-2019-0266 BID MISC MISC
sap -- hana_extended_application_services	Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP HANA 2 SPS0 (second S stands for stack)).	2019-02-15	not yet calculated	CVE-2019-0261 BID MISC MISC
sap -- manufacturing_integration_and_intelligence	SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application.	2019-02-15	not yet calculated	CVE-2019-0267 BID MISC MISC
sap -- netweaver_as_abap_platform	Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.	2019-02-15	not yet calculated	CVE-2019-0257 BID MISC MISC
sap -- netweaver_as_abap_platform	SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The situation can be misused by any user to leverage privileges to business functionality.	2019-02-15	not yet calculated	CVE-2019-0255 BID MISC MISC
sap -- webintelligence_bilaunchpad	SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting (XSS) vulnerability.	2019-02-15	not yet calculated	CVE-2019-0262 BID MISC MISC
sound_exchange_project -- sound_exchange	An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.	2019-02-15	not yet calculated	CVE-2019-8357 MISC
sound_exchange_project -- sound_exchange	An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.	2019-02-15	not yet calculated	CVE-2019-8354 MISC
sound_exchange_project -- sound_exchange	An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.	2019-02-15	not yet calculated	CVE-2019-8356 MISC
sound_exchange_project -- sound_exchange	An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsx_valloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channels_start in remix.c.	2019-02-15	not yet calculated	CVE-2019-8355 MISC
tcpcrypt -- boks	A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. Since tcpcrypt is setuid, exploitation leads to privilege escalation.	2019-02-08	not yet calculated	CVE-2018-20764 CONFIRM
tcpreplay -- tcpreplay	An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	not yet calculated	CVE-2019-8381 MISC MISC
tcpreplay -- tcpreplay	An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	not yet calculated	CVE-2019-8377 MISC MISC
tcpreplay -- tcpreplay	An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	not yet calculated	CVE-2019-8376 MISC MISC
themerig -- find_a_place_cms_directory	Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data_2.php cate parameter.	2019-02-16	not yet calculated	CVE-2019-8360 MISC
tibco -- silver_fabric	The SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that may allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Silver Fabric: versions up to and including 5.8.1.	2019-02-13	not yet calculated	CVE-2018-12409 BID MISC CONFIRM
ua_parser_project -- uap_core	An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service (ReDoS) issue allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to a value containing a long digit string. (The UAP-Core project contains the vulnerability, propagating to all implementations.)	2019-02-13	not yet calculated	CVE-2018-20164 MISC MISC MISC
ubiquiti_networks -- airmax_and_edgemax	Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks.	2019-02-12	not yet calculated	CVE-2017-0938 MISC MISC MISC
verydows -- verydows	Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.	2019-02-16	not yet calculated	CVE-2019-8363 MISC
wecon -- levistudiou	Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings within project files. The process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage these vulnerabilities to execute code under the context of the current process. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.	2019-02-12	not yet calculated	CVE-2019-6537 BID MISC
wordpress -- wordpress	Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory.	2019-02-15	not yet calculated	CVE-2015-4617 MISC MISC
wordpress -- wordpress	Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables	2019-02-15	not yet calculated	CVE-2015-4615 MISC MISC
xerox -- workcentre	An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.	2019-02-10	not yet calculated	CVE-2018-20767 CONFIRM
xerox -- workcentre	An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.	2019-02-10	not yet calculated	CVE-2018-20768 CONFIRM
xerox -- workcentre	An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability.	2019-02-10	not yet calculated	CVE-2018-20769 CONFIRM
xerox -- workcentre	An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution.	2019-02-10	not yet calculated	CVE-2018-20771 CONFIRM
xerox -- workcentre	An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection.	2019-02-10	not yet calculated	CVE-2018-20770 CONFIRM
yingzhi -- python_programming_language	Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage	2019-02-15	not yet calculated	CVE-2013-5654 MISC MISC
yokogawa -- multiple_products	License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.01.01 - R8.02.03)) allows remote attackers to bypass access restriction to send malicious files to the PC where License Manager Service runs via unspecified vectors.	2019-02-13	not yet calculated	CVE-2019-5909 MISC BID MISC
zoho_manageengine -- servicedesk_plus	Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.	2019-02-16	not yet calculated	CVE-2019-8394 CONFIRM
zoho_manageengine -- servicedesk_plus	An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request.	2019-02-16	not yet calculated	CVE-2019-8395 CONFIRM