2019-02-24 - CVE Archive

CVE-2019-9076 Feb 24, 00:29 MEDIUM POC PATCH This Month

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Binutils Element Software Management Gnu Netapp

NVD

CVSS 3.1

5.5

EPSS

1.2%

CVE-2019-9074 Feb 24, 00:29 MEDIUM POC PATCH This Month

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Information Disclosure Canonical Binutils Hci Management Node +4

NVD

CVSS 3.1

5.5

EPSS

1.6%

CVE-2019-9073 Feb 24, 00:29 MEDIUM POC PATCH This Month

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Canonical Binutils Hci Management Node Solidfire +3

NVD

CVSS 3.1

5.5

EPSS

1.1%

CVE-2019-9072 Feb 24, 00:29 MEDIUM POC PATCH This Month

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Binutils Hci Management Node Solidfire Gnu +1

NVD

CVSS 3.1

5.5

EPSS

1.2%

CVE-2019-9071 Feb 24, 00:29 MEDIUM POC PATCH This Month

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Canonical Binutils Hci Management Node Solidfire +3

NVD

CVSS 3.1

5.5

EPSS

1.8%

CVE-2019-9078 Feb 24, 17:29 MEDIUM POC This Month

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Zzcms

NVD GitHub

CVSS 3.0

5.4

EPSS

0.6%