CVEs published January 7, 2019
8 CVEs were published on January 7, 2019: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Apache Software Foundation Apache Thrift · org.apache.thrif…
- 2
- Apache Software Foundation Apache Karaf · org.apache.karaf.…
- 1
- Dokan Open Source File System
- 1
- NetApp OnCommand Unified Manager for 7-Mode
- 1
Medium, low and unrated 8
- CVE-2015-9275ARC 5.21q allows directory traversal via a full pathname in an archive file.
- CVE-2018-11798The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in whiApache Software Foundation Apache Thrift · org.apache.thrif…
- CVE-2018-1320Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.tApache Software Foundation Apache Thrift · org.apache.thrif…
- CVE-2019-5488EARCLINK ESPCMS-P8 has SQL injection in the install_pack/index.php?ac=Member&at=verifyAccount verify_key parameter.
- CVE-2019-5489The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patter
- CVE-2018-11788Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folApache Software Foundation Apache Karaf · org.apache.karaf.…
- CVE-2018-5481OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances makiNetApp OnCommand Unified Manager for 7-Mode
- CVE-2018-5410Dokan file system driver contains a stack-based buffer overflowDokan Open Source File System