CVEs published January 14, 2019
14 CVEs were published on January 14, 2019: 1 critical, 0 high.
- Published
- 14
- Critical
- 1
- High
- 0
- Medium
- 4
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- IBM Security Identity Manager
- 3
- studio-42/elfinder
- 1
- The etcd Project etcd: · go.etcd.io/etcd/v3 +1
- 1
- The systemd Project systemd
- 1
Critical 1
Medium, low and unrated 13
- CVE-2018-16888It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes.The systemd Project systemd
- CVE-2019-6283In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.
- CVE-2019-6284In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.
- CVE-2019-6285The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (s
- CVE-2019-6286In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::pa
- CVE-2018-16886etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control The etcd Project etcd: · go.etcd.io/etcd/v3 +1
- CVE-2019-6278XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option.
- CVE-2018-1956IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it easier for attackersIBM Security Identity Manager
- CVE-2018-1967IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting.IBM Security Identity Manager
- CVE-2019-6259An issue was discovered in idreamsoft iCMS V7.0.13.
- CVE-2019-6251WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections.
- CVE-2019-6256A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93.
- CVE-2019-6257A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal studio-42/elfinder