CVEs published by DWF

CVEs published by DWF (CVE Numbering Authority). 157 tracked.

• CVE-2019-1010180 HIGH 7.8 UPGRADE MITIGATE GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access
• CVE-2019-1010025 MEDIUM 5.3 MITIGATE GNU Libc current is affected by: Mitigation bypass
• CVE-2019-1010024 MEDIUM 5.3 MITIGATE GNU Libc current is affected by: Mitigation bypass
• CVE-2019-1010023 MEDIUM 5.4 MITIGATE GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file
• CVE-2019-1010022 CRITICAL 9.8 MITIGATE GNU Libc current is affected by: Mitigation bypass
• CVE-2019-1020019 MEDIUM 6.1 DOWNGRADE invenio-previewer before 1.0.0a12 allows XSS.
• CVE-2019-1020018 HIGH 7.3 UPGRADE Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email l
• CVE-2019-1020017 MEDIUM 5.3 UPGRADE Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api
• CVE-2019-1020016 MEDIUM 6.1 DOWNGRADE ASH-AIO before 2.0.0.3 allows an open redirect.
• CVE-2019-1020015 HIGH 7.5 UPGRADE graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying J
• CVE-2019-1020014 MEDIUM 5.5 UPGRADE MITIGATE docker-credential-helpers before 0.6.3 has a double free in the List functions.
• CVE-2019-1020013 MEDIUM 5.3 UPGRADE parse-server before 3.6.0 allows account enumeration.
• CVE-2019-1020012 HIGH 7.5 UPGRADE parse-server before 3.4.1 allows DoS after any POST to a volatile class.
• CVE-2019-1020011 HIGH 7.2 MITIGATE SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server opera
• CVE-2019-1020010 MEDIUM 6.1 UPGRADE Misskey before 10.102.4 allows hijacking a user's token.
• CVE-2019-1020009 HIGH 7.5 UPGRADE Fleet before 2.1.2 allows exposure of SMTP credentials.
• CVE-2019-1020008 MEDIUM 6.1 UPGRADE stacktable.js before 1.0.4 allows XSS.
• CVE-2019-1020007 MEDIUM 5.4 UPGRADE Dependency-Track before 3.5.1 allows XSS.
• CVE-2019-1020006 MEDIUM 6.1 UPGRADE invenio-app before 1.1.1 allows host header injection.
• CVE-2019-1020005 MEDIUM 5.4 DOWNGRADE invenio-communities before 1.0.0a20 allows XSS.
• CVE-2019-1020004 HIGH 7.5 UPGRADE Tridactyl before 1.16.0 allows fake key events.
• CVE-2019-1020003 MEDIUM 5.4 UPGRADE invenio-records before 1.2.2 allows XSS.
• CVE-2019-1020002 HIGH 7.5 UPGRADE Pterodactyl before 0.7.14 with 2FA allows credential sniffing.
• CVE-2019-1020001 HIGH 7.5 UPGRADE yard before 0.9.20 allows path traversal.
• CVE-2019-1010319 MEDIUM 5.5 UPGRADE MITIGATE WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable
• CVE-2019-1010317 MEDIUM 5.5 UPGRADE MITIGATE WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable
• CVE-2019-1010316 HIGH 7.8 UPGRADE pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control
• CVE-2019-1010315 MEDIUM 5.5 UPGRADE MITIGATE WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero
• CVE-2019-1010314 MEDIUM 6.1 DOWNGRADE Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010310 LOW 3.5 DOWNGRADE GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by puttin
• CVE-2019-1010308 CRITICAL 9.8 UPGRADE Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control
• CVE-2019-1010307 MEDIUM 5.4 DOWNGRADE GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010306 CRITICAL 9.8 DOWNGRADE Slanger 0.6.0 is affected by: Remote Code Execution (RCE)
• CVE-2019-1010305 MEDIUM 5.5 DOWNGRADE MITIGATE libmspack 0.9.1alpha is affected by: Buffer Overflow
• CVE-2019-1010304 MEDIUM 5.3 UPGRADE Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c
• CVE-2019-1010302 MEDIUM 5.5 DOWNGRADE MITIGATE jhead 3.03 is affected by: Incorrect Access Control
• CVE-2019-1010301 MEDIUM 5.5 DOWNGRADE MITIGATE jhead 3.03 is affected by: Buffer Overflow
• CVE-2019-1010300 HIGH 7.5 DOWNGRADE mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow
• CVE-2019-1010299 MEDIUM 5.3 UPGRADE The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure
• CVE-2019-1010298 CRITICAL 9.8 UPGRADE Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow
• CVE-2019-1010297 CRITICAL 9.8 UPGRADE Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow
• CVE-2019-1010296 CRITICAL 9.8 UPGRADE Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow
• CVE-2019-1010295 CRITICAL 9.8 UPGRADE Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow
• CVE-2019-1010294 HIGH 7.5 UPGRADE Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error
• CVE-2019-1010293 CRITICAL 9.8 UPGRADE Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing
• CVE-2019-1010292 CRITICAL 9.8 UPGRADE Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks
• CVE-2019-1010290 MEDIUM 6.1 UPGRADE Babel: Multilingual site Babel All is affected by: Open Redirection
• CVE-2019-1010287 MEDIUM 6.1 UPGRADE Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010283 HIGH 7.5 UPGRADE Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intent
• CVE-2019-1010279 HIGH 7.5 UPGRADE Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/H
• CVE-2019-1010275 CRITICAL 9.8 UPGRADE helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation
• CVE-2019-1010268 CRITICAL 9.8 UPGRADE Ladon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML External Entity (XXE)
• CVE-2019-1010266 MEDIUM 6.5 UPGRADE lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption
• CVE-2019-1010263 CRITICAL 9.8 UPGRADE Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control
• CVE-2019-1010261 MEDIUM 6.1 UPGRADE Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010260 HIGH 8.1 UPGRADE Using ktlint to download and execute custom rulesets can result in arbitrary code execution as the served jars
• CVE-2019-1010259 CRITICAL 9.8 DOWNGRADE DOWNGRADE SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection
• CVE-2019-1010258 MEDIUM 6.5 MITIGATE nanosvg library nanosvg after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 is affected by: Buffer Overflow
• CVE-2019-1010257 CRITICAL 9.1 UPGRADE An Information Disclosure / Data Modification issue exists in article2pdf_getfile.php in the article2pdf Wordp
• CVE-2019-1010252 MEDIUM 4.9 UPGRADE The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation
• CVE-2019-1010251 HIGH 7.5 DOWNGRADE Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS d
• CVE-2019-1010250 MEDIUM 4.9 UPGRADE The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation
• CVE-2019-1010249 MEDIUM 4.9 UPGRADE The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow
• CVE-2019-1010248 CRITICAL 9.8 UPGRADE Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection
• CVE-2019-1010247 MEDIUM 6.1 UPGRADE ZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010246 HIGH 7.5 UPGRADE MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database pas
• CVE-2019-1010245 CRITICAL 9.8 UPGRADE The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation
• CVE-2019-1010241 MEDIUM 6.5 DOWNGRADE Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Fo
• CVE-2019-1010239 HIGH 7.5 DOWNGRADE UPGRADE DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions
• CVE-2019-1010238 CRITICAL 9.8 UPGRADE DOWNGRADE Gnome Pango 1.42 and later is affected by: Buffer Overflow
• CVE-2019-1010237 MEDIUM 6.1 UPGRADE Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79 Type 2: Stored
• CVE-2019-1010235 MEDIUM 5.4 DOWNGRADE Frog CMS 1.1 is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010234 CRITICAL 9.8 UPGRADE The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation
• CVE-2019-1010232 MEDIUM 6.5 DOWNGRADE Juniper juniper/libslax libslax latest version (as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits
• CVE-2019-1010228 CRITICAL 9.8 UPGRADE MITIGATE OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow
• CVE-2019-1010221 MEDIUM 6.8 UPGRADE LineageOS 16.0 and earlier is affected by: Incorrect Access Control
• CVE-2019-1010220 LOW 3.3 DOWNGRADE tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read
• CVE-2019-1010218 HIGH 7.5 UPGRADE Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Ove
• CVE-2019-1010209 HIGH 7.5 UPGRADE GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434
• CVE-2019-1010208 LOW 3.3 MITIGATE UPGRADE IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) is affected
• CVE-2019-1010207 MEDIUM 6.1 DOWNGRADE Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010206 MEDIUM 5.9 DOWNGRADE OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation
• CVE-2019-1010205 HIGH 7.5 MITIGATE LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal
• CVE-2019-1010204 MEDIUM 5.5 UPGRADE UPGRADE GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Sig
• CVE-2019-1010202 MEDIUM 6.5 DOWNGRADE Jeesite 1.2.7 is affected by: XML External Entity (XXE)
• CVE-2019-1010201 MEDIUM 6.5 DOWNGRADE Jeesite 1.2.7 is affected by: SQL Injection
• CVE-2019-1010200 CRITICAL 9.8 MITIGATE Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef
• CVE-2019-1010199 MEDIUM 6.1 DOWNGRADE ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010193 MEDIUM 6.1 DOWNGRADE hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS).
• CVE-2019-1010191 CRITICAL 9.8 UPGRADE marginalia < 1.6 is affected by: SQL Injection
• CVE-2019-1010190 MEDIUM 5.5 UPGRADE mgetty prior to 1.2.1 is affected by: out-of-bounds read
• CVE-2019-1010189 MEDIUM 5.5 UPGRADE mgetty prior to version 1.2.1 is affected by: Infinite Loop
• CVE-2019-1010183 MEDIUM 6.5 UPGRADE serde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion
• CVE-2019-1010182 MEDIUM 6.5 UPGRADE yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion
• CVE-2019-1010179 CRITICAL 9.8 MITIGATE PHKP including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b is affected by: Improper Neutralization of Spec
• CVE-2019-1010178 CRITICAL 9.8 DOWNGRADE Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648
• CVE-2019-1010177 CRITICAL 9.8 DOWNGRADE Jsish 2.4.70 2.047 is affected by: Use After Free
• CVE-2019-1010176 CRITICAL 9.8 UPGRADE JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow
• CVE-2019-1010174 CRITICAL 9.8 UPGRADE MITIGATE CImg The CImg Library v.2.3.3 and earlier is affected by: command injection
• CVE-2019-1010173 HIGH 7.5 DOWNGRADE Jsish 2.4.84 2.0484 is affected by: Reachable Assertion
• CVE-2019-1010172 HIGH 7.5 DOWNGRADE Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption
• CVE-2019-1010171 HIGH 7.5 DOWNGRADE Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference
• CVE-2019-1010170 HIGH 7.5 DOWNGRADE Jsish 2.4.77 2.0477 is affected by: Use After Free
• CVE-2019-1010169 HIGH 7.5 DOWNGRADE Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read
• CVE-2019-1010163 HIGH 7.8 DOWNGRADE Socusoft Co Photo 2 Video Converter 8.0.0 is affected by: Buffer Overflow - Local shell-code execution and Den
• CVE-2019-1010162 MEDIUM 5.5 DOWNGRADE jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference
• CVE-2019-1010161 CRITICAL 9.8 UPGRADE perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control
• CVE-2019-1010155 CRITICAL 9.1 MITIGATE D-Link DSL-2750U 1.11 is affected by: Authentication Bypass
• CVE-2019-1010153 CRITICAL 9.8 UPGRADE zzcms 8.3 and earlier is affected by: SQL Injection
• CVE-2019-1010152 CRITICAL 9.8 UPGRADE zzcms 8.3 and earlier is affected by: File Delete to Code Execution
• CVE-2019-1010151 CRITICAL 9.8 UPGRADE zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell
• CVE-2019-1010150 CRITICAL 9.8 UPGRADE zzcms 8.3 and earlier is affected by: File Delete to Code Execution
• CVE-2019-1010149 CRITICAL 9.8 UPGRADE zzcms version 8.3 and earlier is affected by: File Delete to Code Execution
• CVE-2019-1010148 CRITICAL 9.8 UPGRADE zzcms version 8.3 and earlier is affected by: SQL Injection
• CVE-2019-1010147 MEDIUM 5.4 MITIGATE UPGRADE Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Esca
• CVE-2019-1010142 HIGH 7.5 DOWNGRADE MITIGATE scapy 2.4.0 is affected by: Denial of Service
• CVE-2019-1010136 HIGH 7.5 MITIGATE ChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated Remote Reboot
• CVE-2019-1010127 HIGH 7.8 UPGRADE VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free
• CVE-2019-1010124 MEDIUM 5.4 UPGRADE WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010123 HIGH 7.5 UPGRADE MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type
• CVE-2019-1010113 MEDIUM 6.1 UPGRADE Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010112 HIGH 8.8 DOWNGRADE OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF)
• CVE-2019-1010104 CRITICAL 9.8 UPGRADE TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection
• CVE-2019-1010101 CRITICAL 9.8 UPGRADE Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions
• CVE-2019-1010100 HIGH 7.8 UPGRADE Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking
• CVE-2019-1010096 HIGH 8.8 DOWNGRADE DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF)
• CVE-2019-1010095 HIGH 8.8 DOWNGRADE DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF)
• CVE-2019-1010094 HIGH 8.8 DOWNGRADE domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF)
• CVE-2019-1010091 MEDIUM 6.1 UPGRADE tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation
• CVE-2019-1010084 MEDIUM 6.5 UPGRADE Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control
• CVE-2019-1010083 HIGH 7.5 UPGRADE The Pallets Project Flask before 1.0 is affected by: unexpected memory usage
• CVE-2019-1010069 MEDIUM 5.5 DOWNGRADE MITIGATE moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control
• CVE-2019-1010066 HIGH 7.5 DOWNGRADE Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control
• CVE-2019-1010065 MEDIUM 6.5 UPGRADE MITIGATE The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow
• CVE-2019-1010062 CRITICAL 9.8 UPGRADE PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type
• CVE-2019-1010060 CRITICAL 9.8 UPGRADE NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow
• CVE-2019-1010057 HIGH 7.8 UPGRADE MITIGATE nfdump 1.6.16 and earlier is affected by: Buffer Overflow
• CVE-2019-1010054 HIGH 8.8 DOWNGRADE Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF)
• CVE-2019-1010044 CRITICAL 9.8 MITIGATE borg-reducer c6d5240 is affected by: Buffer Overflow
• CVE-2019-1010043 CRITICAL 9.8 MITIGATE Quake3e < 5ed740d is affected by: Buffer Overflow
• CVE-2019-1010039 CRITICAL 9.8 UPGRADE uLaunchELF < commit 170827a is affected by: Buffer Overflow
• CVE-2019-1010038 CRITICAL 9.8 UPGRADE OpenModelica OMCompiler is affected by: Buffer Overflow
• CVE-2019-1010034 MEDIUM 6.5 UPGRADE Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection
• CVE-2019-1010028 MEDIUM 6.1 UPGRADE phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scriptin
• CVE-2019-1010018 MEDIUM 6.1 UPGRADE Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80
• CVE-2019-1010017 HIGH 7.5 UPGRADE libnmap < v0.6.3 is affected by: XML Injection
• CVE-2019-1010016 MEDIUM 6.1 DOWNGRADE Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010009 CRITICAL 9.8 MITIGATE DGLogik Inc DGLux Server All Versions is affected by: Insecure Permissions
• CVE-2019-1010008 MEDIUM 5.4 DOWNGRADE OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS)
• CVE-2019-1010006 HIGH 7.8 DOWNGRADE MITIGATE Evince 3.26.0 is affected by buffer overflow

← Back to latest CVEs