Skip to content
OpenAdvisories

Archive

24 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /24 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.1
    CVE-2018-1959

    IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptograp…

    IBM Security Identity Manager
  • Medium 4.3
    CVE-2019-1657

    Cisco AMP Threat Grid API Key Information Disclosure Vulnerability

    A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could exploit this vulnerability by using insecure credentials to gain…

    Cisco Cisco AMP Threat Grid Appliance Software Network devices
  • Medium 4.7
    CVE-2019-1658

    Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerabi…

    Cisco Cisco Unified Intelligence Center Network devices
  • Medium 5.3
    CVE-2019-1656

    Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability

    A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input val…

    Cisco Cisco Enterprise NFV Infrastructure Software Network devices
  • Medium 6.1
    CVE-2019-1655

    Cisco Webex Meetings Server Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnera…

    Cisco Cisco WebEx Meetings Server Network devices
  • Medium 6.1
    CVE-2019-1668

    Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability

    A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insu…

    Cisco Cisco SocialMiner Network devices
  • Medium 4.3
    CVE-2019-1645

    Cisco Connected Mobile Experiences Information Disclosure Vulnerability

    A vulnerability in the Cisco Connected Mobile Experiences (CMX) software could allow an unauthenticated, adjacent attacker to access sensitive data on an affected device. The vulnerability is due to a lack of input and validation checking mechanisms for certa…

    Cisco Cisco Connected Mobile Experiences Network devices