Security Vulnerabilities - CVEs Published In June 2019
Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.026
Published
2019-06-13
An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size.
CVSS Score
9.8
EPSS Score
0.004
Published
2019-06-13
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score
3.6
EPSS Score
0.0
Published
2019-06-13
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score
4.4
EPSS Score
0.0
Published
2019-06-13
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score
4.4
EPSS Score
0.0
Published
2019-06-13
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score
6.7
EPSS Score
0.001
Published
2019-06-13
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score
3.3
EPSS Score
0.0
Published
2019-06-13
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score
3.3
EPSS Score
0.0
Published
2019-06-13
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score
4.4
EPSS Score
0.0
Published
2019-06-13
Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack.
CVSS Score
7.8
EPSS Score
0.0
Published
2019-06-13