WS-2019-0543

openSC in versions 0.12.2-rc1 to 0.19.0 is vulnerable toHeap-buffer-overflow in decodebitstring, related to src/libopensc/asn1.c...

CVE-2019-14493

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

CVE-2019-14492

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14491: Out-of-bounds Read

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14492: Out-of-bounds Read

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

Cross site scripting

ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...

CVE-2019-1010247

ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...

CVE-2019-1010247

ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...

CVE-2019-1010247

ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...

WS-2019-0548

mruby in versions thread-reference-20170716 to thread-reference-20180926 is vulnerable to Stack-buffer-overflow in IsStableUpdated , related to src/core/thread/networkdataleaderftd.cpp...

CVE-2019-1010247: Improper Neutralization of Input During Web Page Generation

ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...

PT-2019-13300

Name of the Vulnerable Software and Affected Versions AVTECH Room Alert 3E versions prior to 2.2.5 Description The issue allows an attacker with access to the device's web interface to escalate privileges from an unauthenticated user to administrator. This can be achieved by performing a...

WS-2019-0554

openthread in versions thread-reference-20170716 to thread-reference-20180926 is vulnerable to Stack-buffer-overflow, related to src/core/thread/mle.cpp...

WS-2019-0562

Openthread before 2019-11-13 is vulnerable to stack-buffer-overflow in ot::Mle::Mle::HandleParentResponse, related to src/core/thread/mle.cpp...

PT-2019-18384

Name of the Vulnerable Software and Affected Versions i-doit Open version 1.12 Description A cross-site scripting XSS issue was found. The issue is related to the src/tools/php/qr/qr.php API endpoint and the url parameter. Recommendations For i-doit Open version 1.12, consider restricting access ...

CVE-2019-6965: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter...

PT-2019-19770

Name of the Vulnerable Software and Affected Versions Pydio versions through 8.2.2 Description An issue was discovered in Pydio where it is possible to evaluate malicious PHP code through an unauthenticated request. This can be achieved by placing the malicious code on the fourth line of a .php...

CVE-2019-9642: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malicious PHP code by placing it on the fourth line of a .php file, as demonstrated by a PoC.php created by the guest account, with execution via a...

WS-2019-0553

libgit2 in versions 0.26.8 to 0.27.5 is vulnerable to Heap-buffer-overflow , related to src/commitlist.c...

CVE-2019-12184

There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136...