CVEs published February 8, 2019
18 CVEs were published on February 8, 2019: 0 critical, 0 high.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Cisco Identity Services Engine Software
- 1
- Cisco Meeting Server
- 1
- Cisco Web Security Appliance
- 1
- Fortinet FortiClientWindows
- 1
- Symantec Ghost Solution Suite
- 1
Medium, low and unrated 18
- CVE-2019-7651EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks
- CVE-2018-9190A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via tFortinet FortiClientWindows
- CVE-2018-1352A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variab
- CVE-2019-1672Cisco Web Security Appliance Decryption Policy Bypass VulnerabilityCisco Web Security Appliance
- CVE-2019-1673Cisco Identity Services Engine Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2019-1676Cisco Meeting Server SIP Processing Denial of Service VulnerabilityCisco Meeting Server
- CVE-2018-18364Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue Symantec Ghost Solution Suite
- CVE-2018-20764A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1.
- CVE-2019-7648controller/fetchpwd.php and controller/doAction.php in Hotels_Server through 2018-11-05 rely on base64 in an attempt to protect password sto
- CVE-2019-7637SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
- CVE-2019-7639An issue was discovered in gsi-openssh-server 7.9p1 on Fedora 29.
- CVE-2019-6242Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page.
- CVE-2019-7632LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metachara
- CVE-2019-7401NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request
- CVE-2019-7628Pagure 5.2 leaks API keys by e-mailing them to users.
- CVE-2019-7635SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
- CVE-2019-7636SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
- CVE-2019-7638SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.