Skip to content
OpenAdvisories

Archive

21 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /21 March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.9
    CVE-2019-1698 Public exploit

    Cisco IoT Field Network Director XML External Entity Vulnerability

    A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is d…

    Cisco Cisco IoT Field Network Director (IoT-FND) Network devices
  • High 8.1
    CVE-2019-6340 Exploited Public exploit Scanner template EPSS 92%

    Drupal core - Highly critical - Remote Code Execution

    Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions …

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
    KEV Mar 25, 2022
  • Unscored —
    CVE-2019-8985 Public exploit EPSS 13%

    On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a sta…

  • Unscored —
    CVE-2019-8982 Public exploit Scanner template EPSS 28%

    com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent…

  • Unscored —
    CVE-2019-8979 Public exploit

    Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.