CVEs published January 4, 2019
10 CVEs were published on January 4, 2019: 0 critical, 0 high.
- Published
- 10
- Critical
- 0
- High
- 0
- Medium
- 4
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- IBM Rational Publishing Engine
- 2
- com.github.binarywang:weixin-java-common
- 1
- IBM API Connect
- 1
- IBM i Access for Windows
- 1
Medium, low and unrated 10
- CVE-2018-20673The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerab
- CVE-2018-20671load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-b
- CVE-2019-5312An issue was discovered in weixin-java-tools v3.3.0.com.github.binarywang:weixin-java-common
- CVE-2018-1657IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting.IBM Rational Publishing Engine
- CVE-2018-1859IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to escalate their privilegeIBM API Connect
- CVE-2018-1888An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution viIBM i Access for Windows
- CVE-2018-1951IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting.IBM Rational Publishing Engine
- CVE-2019-5311An issue was discovered in YUNUCMS V1.1.8.
- CVE-2019-5009Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG fo
- CVE-2019-5310YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_ti