CVEs published February 5, 2019
66 CVEs were published on February 5, 2019: 5 critical, 2 high. 3 are now in CISA KEV.
- Published
- 66
- Critical
- 5
- High
- 2
- Medium
- 3
- Low
- 3
- Unrated
- 53
- Now in CISA KEV
- 3
- Fix available
- 6
Most affected products
- Check Point Software Technologies rdesktop
- 10
- ICS-CERT LCDS Laquis SCADA
- 5
- IBM BigFix Compliance
- 4
- Check Point Software Technologies WinRAR
- 3
- LCDS Laquis SCADA
- 3
- Mozilla Firefox
- 3
- F5 Networks BIG-IP
- 2
- Mozilla Thunderbird · Mozilla Firefox ESR +1
- 2
- [UNKNOWN] kube-rbac-proxy
- 1
- Apache Software Foundation Apache Subversion
- 1
Critical 5
- CVE-2018-3990An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (
- CVE-2018-3991An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500.
- CVE-2018-4056An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9.Talos coTURN
- CVE-2017-18362ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct ac
- CVE-2018-20753Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShel
High 2
- CVE-2018-20250In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (inCheck Point Software Technologies WinRAR
- CVE-2019-6535Mitsubishi Electric MELSEC-Q Series PLCs Resource ExhaustionMitsubishi Electric Q03/04/06/13/26UDVCPU · Mitsubishi E… +1
Medium, low and unrated 59
- CVE-2018-18333A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow an attacker to manipuTrend Micro Security
- CVE-2018-18334A vulnerability in the Private Browser of Trend Micro Dr.Trend Micro Dr. Safety for Android
- CVE-2018-3989An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Versi
- CVE-2018-18500A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements.
- CVE-2018-18501Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-18502Mozilla developers and community members reported memory safety bugs present in Firefox 64.Mozilla Firefox
- CVE-2018-18503When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatcMozilla Firefox
- CVE-2018-18504A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations.
- CVE-2018-18505An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2018-18506When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this Mozilla Firefox
- CVE-2019-6519WebAccess/SCADA, Version 8.3.
- CVE-2019-6521WebAccess/SCADA, Version 8.3.
- CVE-2019-6523WebAccess/SCADA, Version 8.3.
- CVE-2018-20251In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format.Check Point Software Technologies WinRAR
- CVE-2018-20252In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive Check Point Software Technologies WinRAR
- CVE-2018-8791rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.Check Point Software Technologies rdesktop
- CVE-2018-8792rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of SerCheck Point Software Technologies rdesktop
- CVE-2018-8793rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memoryCheck Point Software Technologies rdesktop
- CVE-2018-8794rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updCheck Point Software Technologies rdesktop
- CVE-2018-8795rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitmCheck Point Software Technologies rdesktop
- CVE-2018-8796rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Check Point Software Technologies rdesktop
- CVE-2018-8797rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that results in a memory corruCheck Point Software Technologies rdesktop
- CVE-2018-8798rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information Check Point Software Technologies rdesktop
- CVE-2018-8799rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial ofCheck Point Software Technologies rdesktop
- CVE-2018-8800rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() that results in a memoryCheck Point Software Technologies rdesktop
- CVE-2019-6590On BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may consume excessive resources when processing SSLF5 Networks BIG-IP
- CVE-2017-1177IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users.IBM BigFix Compliance
- CVE-2017-1198IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters.IBM BigFix Compliance
- CVE-2017-1200IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness mightIBM BigFix Compliance
- CVE-2017-1202IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection.IBM BigFix Compliance
- CVE-2018-18986LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds rLCDS Laquis SCADA
- CVE-2018-18990LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation.ICS-CERT LCDS Laquis SCADA
- CVE-2018-18992LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute ICS-CERT LCDS Laquis SCADA
- CVE-2018-18996LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attICS-CERT LCDS Laquis SCADA
- CVE-2018-18998LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system witICS-CERT LCDS Laquis SCADA
- CVE-2018-19000LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.ICS-CERT LCDS Laquis SCADA
- CVE-2018-19002LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, wLCDS Laquis SCADA
- CVE-2018-19029LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlledLCDS Laquis SCADA
- CVE-2019-6591On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in F5 Networks BIG-IP
- CVE-2019-7412The PS PHPCaptcha WP plugin before v1.2.0 for WordPress mishandles sanitization of input values.
- CVE-2019-7413In the Parallax Scroll (aka adamrob-parallax-scroll) plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via
- CVE-2016-1000282Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files.Haraka
- CVE-2018-11803Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer ifApache Software Foundation Apache Subversion
- CVE-2019-3818The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowi[UNKNOWN] kube-rbac-proxy
- CVE-2019-7402An issue was discovered in PHPMyWind 5.5.
- CVE-2019-7403An issue was discovered in PHPMyWind 5.5.
- CVE-2019-7400Rukovoditel before 2.4.1 allows XSS.
- CVE-2018-15655An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings.
- CVE-2018-15656An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27.
- CVE-2018-15657An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
- CVE-2018-15658An issue was discovered in 42Gears SureMDM before 2018-11-27.
- CVE-2018-15659An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight applications.
- CVE-2019-7388An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03.
- CVE-2019-7389An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03.
- CVE-2019-7390An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03.
- CVE-2019-7395In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.
- CVE-2019-7396In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.
- CVE-2019-7397In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.
- CVE-2019-7398In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.