CVEs published January 28, 2019
28 CVEs were published on January 28, 2019: 0 critical, 1 high.
- Published
- 28
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 1
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- ICS-CERT Dräger Infinity Delta
- 3
- Adobe Experience Manager
- 2
- Adobe Acrobat and Reader
- 1
- Adobe Experience Manager Forms
- 1
- Debian GNU/Linux apt as used in Debian Stretch and Ubuntu
- 1
- github.com/gofiber/fiber/v2 · github.com/rs/cors
- 1
- ICS-CERT CX-Supervisor
- 1
- Mcafee Total Protection
- 1
- org.vivoweb:vitro-project
- 1
- The Bluez Project bluez
- 1
High 1
Medium, low and unrated 27
- CVE-2018-19010Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions.ICS-CERT Dräger Infinity Delta
- CVE-2018-19014Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions.ICS-CERT Dräger Infinity Delta
- CVE-2018-19721Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun
- CVE-2018-19723Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun
- CVE-2018-19012Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions.ICS-CERT Dräger Infinity Delta
- CVE-2019-3462Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by aDebian GNU/Linux apt as used in Debian Stretch and Ubuntu
- CVE-2019-6990A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScri
- CVE-2019-6991A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, all
- CVE-2019-6992A stored-self XSS exists in web/skins/classic/views/controlcaps.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or Ja
- CVE-2018-19015An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a ICS-CERT CX-Supervisor
- CVE-2018-19724Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability.Adobe Experience Manager Forms
- CVE-2018-19726Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability.Adobe Experience Manager
- CVE-2018-19727Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability.Adobe Experience Manager
- CVE-2018-19728Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earAdobe Acrobat and Reader
- CVE-2019-6988An issue was discovered in OpenJPEG 2.3.0.
- CVE-2018-10910A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system.The Bluez Project bluez
- CVE-2019-3815A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux.The systemd Project systemd
- CVE-2019-6986SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular exprorg.vivoweb:vitro-project
- CVE-2018-16889Ceph does not properly sanitize encryption keys in debug logging for v4 auth.The Ceph Project ceph
- CVE-2019-6982An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF.
- CVE-2019-6983An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF.
- CVE-2019-6984An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF.
- CVE-2019-6985An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF.
- CVE-2018-20744The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value,github.com/gofiber/fiber/v2 · github.com/rs/cors
- CVE-2018-20745Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible wiyiisoft/yii2
- CVE-2019-6979An issue was discovered in the User IP History Logs (aka IP_History_Logs) plugin 1.0.2 for MyBB.
- CVE-2019-6978The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c.