CVEs published January 1, 2019
4 CVEs were published on January 1, 2019: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 4
- CVE-2018-20650A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the
- CVE-2018-20651A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbf
- CVE-2018-20652An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5.
- CVE-2019-3494Simply-Blog through 2019-01-01 has SQL Injection via the admin/deleteCategories.php delete parameter.