Поиск уязвимостей
Количество 33 686
Количество 33 686
CVE-2019-16276
CVE-2019-16275
CVE-2019-16255
CVE-2019-16254
CVE-2019-16201
CVE-2019-16168
In SQLite through 3.29.0 whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field aka a "severe division by zero in the query planner."
CVE-2019-15961
CVE-2019-15903
In libexpat before 2.2.8 crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
CVE-2019-15847
CVE-2019-15845
CVE-2019-1563
Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
CVE-2019-1551
rsaz_512_sqr overflow bug on x86_64
CVE-2019-1549
Fork Protection
CVE-2019-15485
Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php
CVE-2019-15484
Bolt before 3.6.10 has XSS via an image's alt or title field.
CVE-2019-15483
Bolt before 3.6.10 has XSS via a title that is mishandled in the system log
CVE-2019-1547
ECDSA remote timing attack
CVE-2019-1543
ChaCha20-Poly1305 with long nonces
CVE-2019-15126
MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device
CVE-2019-14959
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVSS3: 7.5 | 5% Низкий | около 2 лет назад | ||
CVSS3: 6.5 | 1% Низкий | около 6 лет назад | ||
CVSS3: 8.1 | 4% Низкий | около 6 лет назад | ||
CVSS3: 5.3 | 5% Низкий | около 6 лет назад | ||
CVSS3: 7.5 | 5% Низкий | около 6 лет назад | ||
CVE-2019-16168 In SQLite through 3.29.0 whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field aka a "severe division by zero in the query planner." | CVSS3: 6.5 | 4% Низкий | 9 месяцев назад | |
CVSS3: 6.5 | 3% Низкий | около 6 лет назад | ||
CVE-2019-15903 In libexpat before 2.2.8 crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read. | CVSS3: 7.5 | 7% Низкий | почти 5 лет назад | |
CVSS3: 7.5 | 3% Низкий | около 6 лет назад | ||
CVSS3: 6.5 | 3% Низкий | около 6 лет назад | ||
CVE-2019-1563 Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey | 4% Низкий | 7 месяцев назад | ||
CVE-2019-1551 rsaz_512_sqr overflow bug on x86_64 | 14% Средний | 7 месяцев назад | ||
CVE-2019-1549 Fork Protection | 6% Низкий | 7 месяцев назад | ||
CVE-2019-15485 Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php | CVSS3: 6.1 | 1% Низкий | около 1 года назад | |
CVE-2019-15484 Bolt before 3.6.10 has XSS via an image's alt or title field. | CVSS3: 6.1 | 1% Низкий | около 1 года назад | |
CVE-2019-15483 Bolt before 3.6.10 has XSS via a title that is mishandled in the system log | CVSS3: 6.1 | 1% Низкий | около 1 года назад | |
CVE-2019-1547 ECDSA remote timing attack | 1% Низкий | около 1 года назад | ||
CVE-2019-1543 ChaCha20-Poly1305 with long nonces | 6% Низкий | 7 месяцев назад | ||
CVE-2019-15126 MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device | 7% Низкий | больше 3 лет назад | ||
CVE-2019-14959 JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection. | CVSS3: 5.9 | 1% Низкий | около 1 года назад |
Уязвимостей на страницу