Skip to content
OpenAdvisories

Archive

January 2019

Vulnerabilities first published in this month (UTC), newest first.

← December 2018 2019 / January February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.8
    CVE-2019-6110 Public exploit EPSS 25%

    In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-…

    openssh openssh openssh-ssh1 Debian Ubuntu
  • Medium 5.9
    CVE-2019-6111 Public exploit EPSS 58%

    An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses w…

    openssh openssh openssh-ssh1 openssh Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2019-6804 Public exploit

    Rundeck Community Edition vulnerable to Cross-site Scripting

    An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.

    org.rundeck:rundeck Maven
  • Medium 6.1
    CVE-2019-1642 Public exploit

    Cisco Firepower Management Center Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of th…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 4.3
    CVE-2018-13374 Exploited · Ransomware Public exploit EPSS 38%

    A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 a…

    Fortinet Fortinet FortiOS, fortiADC Network devices
    KEV Sep 8, 2022
  • Medium 6.5
    CVE-2017-18357 Public exploit EPSS 27%

    Shopware XXE Vulnerability

    Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.

    shopware/shopware Packagist
  • Medium 6.1
    CVE-2016-10735 Public exploit

    Bootstrap Cross-site Scripting vulnerability

    In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

    bootstrap twitter-bootstrap3 twitter-bootstrap3 bootstrap-sass Debian Ubuntu npm Packagist Maven NuGet RubyGems
  • Medium 4.9
    CVE-2018-1932 Public exploit

    IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the manageme…

    IBM API Connect
  • Medium 5.3
    CVE-2018-18893 Public exploit

    Jinjava calls getClass

    Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.

    com.hubspot.jinjava:jinjava Maven