Skip to content
OpenAdvisories

Archive

22 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /22 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2017-6923

    Access bypass in Drupal 8 views

    In Drupal 8.x prior to 8.3.7 When creating a view, you can optionally use Ajax to update the displayed data via filter parameters. The views subsystem/module did not restrict access to the Ajax endpoint to only views configured to use Ajax. This is mitigated …

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
  • Medium 6.8
    CVE-2018-14666

    An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change config…

    [UNKNOWN] Satellite
  • Medium 6.5
    CVE-2017-6922

    Files uploaded by anonymous users into a private file system can be accessed by other anonymous users

    In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than al…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Packagist
  • Medium 4.3
    CVE-2018-13374 Exploited · Ransomware Public exploit EPSS 38%

    A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 a…

    Fortinet Fortinet FortiOS, fortiADC Network devices
    KEV Sep 8, 2022