IDCVSSSummaryLast (major) updatePublished
CVE-2019-8950 None
The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET.
19-02-2019 - 23:29 19-02-2019 - 23:29
CVE-2019-8948 None
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.
19-02-2019 - 23:29 19-02-2019 - 23:29
CVE-2019-8944 None
An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.
19-02-2019 - 22:29 19-02-2019 - 22:29
CVE-2019-8943 None
WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filen
19-02-2019 - 22:29 19-02-2019 - 22:29
CVE-2019-8942 None
WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can exe
19-02-2019 - 22:29 19-02-2019 - 22:29
CVE-2018-19106 None
Avi Vantage before 17.2.13 uses an invalid URL encoding during a redirect operation, aka AV-33959.
19-02-2019 - 21:29 19-02-2019 - 21:29
CVE-2019-7164 None
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
19-02-2019 - 19:29 19-02-2019 - 19:29
CVE-2018-9867 None
In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected
19-02-2019 - 16:29 19-02-2019 - 16:29
CVE-2018-20026 None
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
19-02-2019 - 16:29 19-02-2019 - 16:29
CVE-2018-20025 None
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
19-02-2019 - 16:29 19-02-2019 - 16:29
CVE-2019-5782 6.8
Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
19-02-2019 - 13:56 19-02-2019 - 12:29
CVE-2019-5775 4.3
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
19-02-2019 - 13:41 19-02-2019 - 12:29
CVE-2019-5781 4.3
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
19-02-2019 - 13:40 19-02-2019 - 12:29
CVE-2019-5777 4.3
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
19-02-2019 - 13:39 19-02-2019 - 12:29
CVE-2019-5776 4.3
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
19-02-2019 - 13:38 19-02-2019 - 12:29
CVE-2019-5779 4.3
Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
19-02-2019 - 13:35 19-02-2019 - 12:29
CVE-2019-5783 6.8
Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5780 None
Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5778 None
A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileg
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5774 6.8
Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .deskto
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5773 4.3
Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5772 6.8
Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5771 None
An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5770 6.8
Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5769 None
Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5768 None
DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5767 None
Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5766 None
Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5765 4.3
An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5764 6.8
Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5763 None
Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5762 None
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5761 6.8
Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5760 6.8
Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5759 6.8
Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5758 6.8
Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5757 6.8
An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5756 6.8
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5755 5.8
Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-5754 4.3
Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy.
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2018-1996 None
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuration. A remote attacker could exploit this vulnerability to obtain sensitive information using man in the middle
19-02-2019 - 12:29 19-02-2019 - 12:29
CVE-2019-8939 4.3
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.
19-02-2019 - 11:29 19-02-2019 - 11:29
CVE-2019-8935 3.5
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.
19-02-2019 - 10:29 19-02-2019 - 10:29
CVE-2019-3812 None
QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A local attacker with permission to execute i2c commands could exploit this to read stack memo
19-02-2019 - 09:29 19-02-2019 - 09:29
CVE-2019-8933 None
In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequence of steps: visiting the management page, clicking on the template, cli
18-02-2019 - 21:29 18-02-2019 - 21:29
CVE-2019-8919 None
The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or di
18-02-2019 - 15:29 18-02-2019 - 15:29
CVE-2019-7629 7.5
Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbitrary code by sending a long message to the client.
18-02-2019 - 15:29 18-02-2019 - 15:29
CVE-2019-8917 10.0
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly ex
18-02-2019 - 14:29 18-02-2019 - 14:29
CVE-2019-8912 7.5
In the Linux kernel through 4.20.10, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.
18-02-2019 - 13:29 18-02-2019 - 13:29
CVE-2019-8911 4.3
An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website statistics code).
18-02-2019 - 13:29 18-02-2019 - 13:29
Back to Top Mark selected
Back to Top