Skip to content
OpenAdvisories

Archive

7 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /7 March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-1670

    Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The v…

    Cisco Cisco Unified Contact Center Express Network devices
  • Medium 5.3
    CVE-2019-1660

    Cisco TelePresence Management Suite Simple Object Access Protocol Vulnerability

    A vulnerability in the Simple Object Access Protocol (SOAP) of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper a…

    Cisco Cisco TelePresence Management Suite (TMS) Network devices
  • Medium 6.1
    CVE-2019-1671

    Cisco Firepower Management Center Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 6.1
    CVE-2019-1661

    Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of …

    Cisco Cisco TelePresence Management Suite (TMS) Network devices
  • Medium 4.3
    CVE-2019-1680

    Cisco Webex Business Suite Content Injection Vulnerability

    A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing …

    Cisco Cisco Webex Business Suite Network devices
  • Medium 5.0
    CVE-2019-1679

    Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability

    A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to…

    Cisco Cisco TelePresence Conductor Cisco TelePresence Video Communication Server Cisco Expressway Series Network devices
  • Medium 4.3
    CVE-2019-1678

    Cisco Meeting Server Denial of Service Vulnerability

    A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service (DoS) to Cisco Meetings application users who are paired with a Session Initiation Protocol (SIP) endpoint. The vulnerability is due to …

    Cisco Cisco Meeting Server Network devices
  • Medium 5.0
    CVE-2019-1677

    Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability

    A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An at…

    Cisco Cisco WebEx Meetings for Android Android Network devices
  • Medium 4.3
    CVE-2018-1666

    IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0…

    IBM DataPower Gateway
  • Medium 5.5
    CVE-2019-7560

    Boolector use after free

    In parser/btorsmt2.c in Boolector 3.0.0, opening a specially crafted input file leads to a use after free in get_failed_assumptions or btor_delete.

    pyboolector PyPI