CVEs published January 17, 2019
12 CVEs were published on January 17, 2019: 0 critical, 0 high.
- Published
- 12
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Microsoft Team
- 2
- Microsoft Skype
- 1
Medium, low and unrated 12
- CVE-2018-20735An issue was discovered in BMC PATROL Agent through 11.3.01.
- CVE-2019-0624A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype forMicrosoft Skype
- CVE-2019-0646A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team FounMicrosoft Team
- CVE-2019-0647An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team FoMicrosoft Team
- CVE-2018-20727Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt pa
- CVE-2018-20728A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.p
- CVE-2018-20729A reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML vi
- CVE-2018-20730A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the query.php component.
- CVE-2018-20731A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via U
- CVE-2015-9281Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.
- CVE-2018-20732SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.
- CVE-2018-20733BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.