CVEs published January 31, 2019
29 CVEs were published on January 31, 2019: 1 critical, 0 high.
- Published
- 29
- Critical
- 1
- High
- 0
- Medium
- 4
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- ABB CMS-770
- 1
- ABB M2M ETHERNET
- 1
- Apache Software Foundation Apache OpenOffice
- 1
- IBM i
- 1
- Nvidia Android
- 1
- Practecol Guardzilla All-In-One Video Security System
- 1
- The Eclipse Foundation Eclipse OpenJ9
- 1
Critical 1
Medium, low and unrated 28
- CVE-2019-7297An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03.
- CVE-2018-17928The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing thABB CMS-770
- CVE-2019-7295typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula.
- CVE-2019-7296typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula.
- CVE-2018-12548In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives whichThe Eclipse Foundation Eclipse OpenJ9
- CVE-2018-6241NVIDIA Tegra Gralloc module contains a vulnerability in driver in which it does not validate input parameter of the registerbuffer API, whicNvidia Android
- CVE-2018-15515The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a Trojan horse "quserex.dll" from the Captivel
- CVE-2018-15516The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via p
- CVE-2018-15517The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but act
- CVE-2018-18940servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the
- CVE-2018-18941In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password
- CVE-2018-19040The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocat
- CVE-2018-19041The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax
- CVE-2018-19042The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dir_from and dir_to pa
- CVE-2018-19043The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename) via a ../ directory
- CVE-2019-7282In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of .
- CVE-2019-7283An issue was discovered in rcp in NetKit through 0.17.
- CVE-2018-17926The product M2M ETHERNET (FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior) is vulnerable in that an attacker can upload a malicioABB M2M ETHERNET
- CVE-2018-11790When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defeApache Software Foundation Apache OpenOffice
- CVE-2019-4040IBM I 7.2 and 7.3 is vulnerable to cross-site scripting.IBM i
- CVE-2017-18360In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by divi
- CVE-2019-6438SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.
- CVE-2019-7216An issue was discovered in FileChucker 4.99e-free-e02.
- CVE-2019-7249In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one use
- CVE-2019-7250An issue was discovered in the Cross Reference Add-on 36 for Google Docs.
- CVE-2019-6109An issue was discovered in OpenSSH 7.9.
- CVE-2019-6110In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker)
- CVE-2019-6111An issue was discovered in OpenSSH 7.9.