CVEs published January 30, 2019
18 CVEs were published on January 30, 2019: 0 critical, 0 high.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Apache Software Foundation Apache HTTP Server
- 3
- Tenable LabKey Server Community Edition
- 3
- Palo Alto Networks PAN-OS
- 2
- Foxit
- 1
- Omron CX-Protocol within CX-One
- 1
Medium, low and unrated 18
- CVE-2018-17189In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that reApache Software Foundation Apache HTTP Server
- CVE-2018-17199In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session.Apache Software Foundation Apache HTTP Server
- CVE-2018-3956An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader versFoxit
- CVE-2019-0190A bug exists in the way mod_ssl handled client renegotiations.Apache Software Foundation Apache HTTP Server
- CVE-2019-7233In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.
- CVE-2019-7234An issue was discovered in idreamsoft iCMS 7.0.13.
- CVE-2019-7235An issue was discovered in idreamsoft iCMS 7.0.13.
- CVE-2019-7236An issue was discovered in idreamsoft iCMS 7.0.13.
- CVE-2019-7237An issue was discovered in idreamsoft iCMS 7.0.13 on Windows.
- CVE-2019-1565The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacPalo Alto Networks PAN-OS
- CVE-2019-1566The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauPalo Alto Networks PAN-OS
- CVE-2019-3911Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remoTenable LabKey Server Community Edition
- CVE-2019-3912An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unautTenable LabKey Server Community Edition
- CVE-2019-3913Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any driveTenable LabKey Server Community Edition
- CVE-2018-20748LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c.
- CVE-2018-20749LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c.
- CVE-2018-20750LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c.
- CVE-2018-19027Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project Omron CX-Protocol within CX-One