CVEs published February 12, 2019
35 CVEs were published on February 12, 2019: 0 critical, 1 high.
- Published
- 35
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 34
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Android
- 12
- ICS-CERT PR100088 Modbus gateway
- 3
- FreeBSD
- 2
- ICS-CERT CX-Supervisor
- 2
- *** n/a *** Android
- 1
- Cisco Network Assurance Engine
- 1
- HackerOne airMAX, EdgeMAX
- 1
- joomla/joomla-cms
- 1
- NetApp ATTO FibreBridge
- 1
- NetIQ eDirectory NetIQ Access Manager
- 1
High 1
Medium, low and unrated 34
- CVE-2019-8308Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a
- CVE-2017-0938Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Discovery Protocol in amplificatiHackerOne airMAX, EdgeMAX
- CVE-2018-19018An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing proICS-CERT CX-Supervisor
- CVE-2018-19020When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the applICS-CERT CX-Supervisor
- CVE-2018-19645Solutions Business Manager (SBM) Authentication Bypass Issue in Version prior to 11.5NetIQ eDirectory NetIQ Access Manager
- CVE-2018-5499ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial of Service (DoS).NetApp ATTO FibreBridge
- CVE-2019-7550In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function.
- CVE-2019-6549An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or SoftwareICS-CERT PR100088 Modbus gateway
- CVE-2019-7739An issue was discovered in Joomla! before 3.9.3.
- CVE-2019-7740An issue was discovered in Joomla! before 3.9.3.
- CVE-2019-7741An issue was discovered in Joomla! before 3.9.3.
- CVE-2019-7742An issue was discovered in Joomla! before 3.9.3.
- CVE-2019-7743An issue was discovered in Joomla! before 3.9.3.joomla/joomla-cms
- CVE-2019-7744An issue was discovered in Joomla! before 3.9.3.
- CVE-2018-20781In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daem
- CVE-2019-6527PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the passworICS-CERT PR100088 Modbus gateway
- CVE-2019-6533Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway vICS-CERT PR100088 Modbus gateway
- CVE-2019-7753Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.
- CVE-2019-5595In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not proFreeBSD
- CVE-2019-5596In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the rFreeBSD
- CVE-2019-3923Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input.Tenable Nessus
- CVE-2018-9582In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused dAndroid
- CVE-2018-9583In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possiAndroid
- CVE-2018-9584In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is Android
- CVE-2018-9585In nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is aAndroid
- CVE-2018-9586In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, it is possible that Android
- CVE-2018-9587In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, theAndroid
- CVE-2018-9588In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a pAndroid
- CVE-2018-9589In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a pAndroid
- CVE-2018-9590In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible outAndroid
- CVE-2018-9591In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a posAndroid
- CVE-2018-9592In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible Android
- CVE-2018-9593In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possiAndroid
- CVE-2018-9594In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a p*** n/a *** Android