Skip to content
OpenAdvisories

Archive

10 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /10 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • High 7.1
    CVE-2018-4046

    An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to imp…

  • Unscored —
    CVE-2019-5887

    An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not…

  • Unscored —
    CVE-2019-5886

    An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation l…

  • Medium 5.9
    CVE-2019-5884

    Sensitive Data Exposure in elFinder

    php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.

    studio-42/elfinder Packagist
  • Unscored —
    CVE-2018-20683

    commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allow…

    gitolite3 gitolite3 gitolite Debian Ubuntu Alpine
  • Medium 6.8
    CVE-2018-0282

    Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability

    A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control …

    Cisco Cisco IOS iOS Network devices
  • High 7.3
    CVE-2018-0181

    Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent Software Redis Server Unauthenticated Access Vulnerability

    A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis s…

    Cisco Cisco Policy Suite (CPS) Software Network devices
  • Medium 5.3
    CVE-2018-20685

    In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filena…

    openssh openssh openssh-ssh1 openssh Debian Ubuntu Alpine