Skip to content
OpenAdvisories

Archive

20 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /20 March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2019-3474 Public exploit

    Path traversal vulnerability in Filr web application

    A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior …

    Micro Focus Filr
  • High 7.8
    CVE-2019-3475 Public exploit

    Local privilege escalation in Filr famtd

    A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.

    Micro Focus Filr
  • Unscored —
    CVE-2019-3924 Public exploit EPSS 16%

    MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The s…

    Tenable MikroTik RouterOS
  • Medium 6.1
    CVE-2019-8331 Public exploit EPSS 16%

    Bootstrap Vulnerable to Cross-Site Scripting

    In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

    ceph fluent-bit pytorch ntopng Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems
  • Unscored —
    CVE-2019-8953 Public exploit EPSS 52%

    The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, r…

  • Unscored —
    CVE-2019-8942 Public exploit EPSS 83%

    WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry c…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-8943 Public exploit Scanner template EPSS 92%

    WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can…

    wordpress wordpress Debian Ubuntu