Skip to content
OpenAdvisories

Archive

3 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /3 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2018-19998

    Dolibarr SQL injection vulnerability in user/card.php

    SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 8.8
    CVE-2018-19994

    Dolibarr error-based SQL injection vulnerability in product/card.php

    An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 7.8
    CVE-2019-3575

    sqla-yaml-fixtures is vulnerable to Code Injection

    Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.

    sqla-yaml-fixtures PyPI
  • High 7.3
    CVE-2018-16879

    Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration chan…

    [UNKNOWN] Tower