Skip to content
OpenAdvisories

Archive

4 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /4 March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2018-15778

    DSA-2019-019: Dell Networking OS10 OS Command Injection Vulnerability

    Dell OS10 versions prior to 10.4.2.1 contain a vulnerability caused by lack of proper input validation on the command-line interface (CLI).

    Dell Dell Networking OS10
  • High 7.1
    CVE-2018-1970

    IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML d…

    IBM Security Identity Manager
  • High 8.8
    CVE-2019-1000013

    Hex authenticity of signed packages not validated

    Hex package manager hex_core version 0.3.0 and earlier contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. This attack appears to be exploitable via victim fe…

    hex_core Hex
  • High 7.5
    CVE-2019-1000021

    slixmpp Incorrect Access Control

    slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private Data via PubSub) options profile, used for the configuration of default access model th…

    slixmpp slixmpp slixmpp Debian Ubuntu PyPI
  • High 8.8
    CVE-2019-1000005

    mPDF Unsafe Deserialization

    mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry code execution, file write, etc.. This attack appears to be exploitable via attack…

    mpdf/mpdf Packagist
  • High 7.4
    CVE-2019-1000007

    Depth counting error in guard() leading to multiple potential security issues in aioxmpp

    aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard function that can result in Denial of Service, Other. This attack appears to be ex…

    aioxmpp python-aioxmpp Debian PyPI
  • High 7.2
    CVE-2019-4038

    IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the a…

    IBM Security Identity Manager