Skip to content
OpenAdvisories

Archive

4 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /4 March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.0
    CVE-2018-1962

    IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is pres…

    IBM Security Identity Manager
  • Medium 5.3
    CVE-2018-1801

    IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0…

    IBM Integration Bus WebSphere Message Broker App Connect
  • Medium 6.8
    CVE-2018-1675

    IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memo…

    IBM Tivoli Application Dependency Discovery Manager
  • Medium 6.5
    CVE-2019-1000011

    Incorrect Access Control vulnerability in api-platform/core

    API Platform version from 2.2.0 to 2.3.5 contains an Incorrect Access Control vulnerability in GraphQL delete mutations that can result in a user authorized to delete a resource can delete any resource. This attack appears to be exploitable via the user must …

    api-platform/core Packagist
  • Medium 6.5
    CVE-2019-1000002

    Gitea Arbitrary File Delete Vulnerability

    Gitea version 1.6.2 and earlier contains a Incorrect Access Control vulnerability in Delete/Edit file functionallity that can result in the attacker deleting files outside the repository he/she has access to. This attack appears to be exploitable via the atta…

    code.gitea.io/gitea Go
  • Medium 6.5
    CVE-2019-1000008

    Helm Path Traversal

    All versions of Helm between Helm >=2.0.0 and < 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The commands `helm fetch --untar` and `helm lint some.tgz` that can result when chart arc…

    helm.sh/helm Go
  • Medium 5.5
    CVE-2018-11760

    Pyspark User Impersonation Vulnerability

    When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.

    Apache Software Foundation Apache Spark pyspark PyPI
  • Medium 5.3
    CVE-2019-7317

    png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called un…

    thunderbird firefox thunderbird firefox-esr Debian Ubuntu Azure Linux Alpine Wolfi