Skip to content
OpenAdvisories

Archive

January 2019

Vulnerabilities first published in this month (UTC), newest first.

← December 2018 2019 / January February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

97 results · Clear filters · Feed

  • High 8.6
    CVE-2018-16202

    Path Traversal in cordova-plugin-ionic-webview

    Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.

    npm cordova-plugin-ionic-webview cordova-plugin-ionic-webview npm
  • High 7.5
    CVE-2018-20679

    An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP serve…

    busybox busybox busybox Debian Ubuntu Alpine
  • High 7.5
    CVE-2019-5747

    An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP clie…

    busybox busybox busybox Debian Ubuntu Alpine
  • High 8.8
    CVE-2019-0542

    xterm vulnerable to remote code execution

    A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.

    https://xtermjs.org/ xterm.js xterm node-xterm Debian npm
  • High 7.5
    CVE-2019-3581

    McAfee Web Gateway denial of service attack due to Improper Input Validation

    Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.

    McAfee McAfee Web Gateway
  • High 7.5
    CVE-2019-0567 Public exploit EPSS 80%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2019-0568 Public exploit EPSS 69%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 8.8
    CVE-2019-0541 Exploited Public exploit EPSS 53%

    A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML …

    Microsoft Microsoft Office Internet Explorer 11 Internet Explorer 10
    KEV Nov 3, 2021
  • High 7.8
    CVE-2019-0543 Exploited · Ransomware Public exploit

    An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft …

    KEV Mar 15, 2022
  • High 7.5
    CVE-2019-0539 Public exploit EPSS 83%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2019-0564

    Denial of service in ASP.NET Core

    A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

    Microsoft ASP.NET Core Microsoft.AspNetCore.All Microsoft.NETCore.App NuGet
  • High 7.5
    CVE-2019-0545

    Exposure of Sensitive Information in System.Net.Http

    An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Mi…

    Microsoft .NET Core Microsoft .NET Framework Microsoft.NETCore.App NuGet
  • High 7.5
    CVE-2018-1320

    Improper Input Validation in Apache Thrift

    Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be di…

    Apache Software Foundation Apache Thrift druid druid-compat Debian Ubuntu Wolfi Maven
  • High 8.8
    CVE-2018-19998

    Dolibarr SQL injection vulnerability in user/card.php

    SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 8.8
    CVE-2018-19994

    Dolibarr error-based SQL injection vulnerability in product/card.php

    An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 7.8
    CVE-2019-3575

    sqla-yaml-fixtures is vulnerable to Code Injection

    Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.

    sqla-yaml-fixtures PyPI
  • High 7.3
    CVE-2018-16879

    Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration chan…

    [UNKNOWN] Tower