Skip to content
OpenAdvisories

Archive

17 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /17 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2018-20735 Public exploit

    An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for …

  • Unscored —
    CVE-2019-0646

    A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided …

    Microsoft Team
  • Unscored —
    CVE-2019-0624

    A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted re…

    Microsoft Skype
  • Unscored —
    CVE-2019-0647

    An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as…

    Microsoft Team
  • Unscored —
    CVE-2018-20731

    A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2018-20727

    Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the serve…

  • Unscored —
    CVE-2018-20728

    A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges …

  • Unscored —
    CVE-2018-20730

    A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the quer…

  • Unscored —
    CVE-2018-20729

    A reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2015-9281

    Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.

  • Unscored —
    CVE-2018-20732

    SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserializati…

  • Unscored —
    CVE-2018-20733

    BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.