2019-01-02

2019-01-03

2019-01-04

All (3) Critical (1) High (3) Medium (3)

CVE-2019-3701 Jan 03, 16:29 MEDIUM POC PATCH This Month

An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. Public exploit code available.

Buffer Overflow Linux Memory Corruption Debian Canonical +3

NVD

CVSS 3.0

4.4

EPSS

0.7%

CVE-2019-5006 Jan 03, 23:29 MEDIUM PATCH This Month

An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Null Pointer Dereference Microsoft Foxit Reader Phantompdf +1

NVD

CVSS 3.0

5.5

EPSS

0.9%

CVE-2019-5005 Jan 03, 23:29 MEDIUM PATCH This Month

An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Denial Of Service Memory Corruption Microsoft Foxit Reader +2

NVD

CVSS 3.0

5.5

EPSS

1.3%