Skip to content
OpenAdvisories

Archive

23 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /23 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-1643

    Cisco Prime Infrastructure Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. T…

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 6.1
    CVE-2019-1642 Public exploit

    Cisco Firepower Management Center Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of th…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 6.5
    CVE-2018-0187

    Cisco Identity Services Engine Privileged Account Sensitive Information Disclosure Vulnerability

    A vulnerability in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain confidential information for privileged accounts. The vulnerability is due to the improper handling of confidential information…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.5
    CVE-2018-1000997

    Improper Limitation of a Pathname to a Restricted Directory in Jenkins

    A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/org/kohsuke/stapler/Facet.java, groovy/src/main/java/org/kohsuke/stapler/jelly/groovy/GroovyFacet.java, jelly/s…

    org.jenkins-ci.main:jenkins-core org.kohsuke.stapler:stapler-parent Maven
  • Medium 6.5
    CVE-2018-15459

    Cisco Identity Services Engine Privilege Escalation Vulnerability

    A vulnerability in the administrative web interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain additional privileges on an affected device. The vulnerability is due to improper controls on certain pages in th…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.1
    CVE-2018-15455

    Cisco Identity Services Engine Logging Cross-Site Scripting Vulnerability

    A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of requests stored in the system's logging …

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.8
    CVE-2018-15614

    IP Office one-X Portal XSS

    A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users. Affected versions of IP Offic…

    Avaya IP Office
  • Medium 5.9
    CVE-2018-1751

    IBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic algorithms that could al…

    IBM Security Key Lifecycle Manager
  • Medium 4.3
    CVE-2018-2026

    IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory li…

    IBM Financial Transaction Manager