Skip to content
OpenAdvisories

Archive

21 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /21 March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.1
    CVE-2019-6340 Exploited Public exploit Scanner template EPSS 92%

    Drupal core - Highly critical - Remote Code Execution

    Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions …

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
    KEV Mar 25, 2022
  • High 7.5
    CVE-2019-1681

    Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability

    A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability …

    Cisco Cisco Network Convergence System 1000 Series Network devices
  • High 8.1
    CVE-2019-1664

    Cisco HyperFlex Software Unauthenticated Root Access Vulnerability

    A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this …

    Cisco Cisco HyperFlex HX-Series Network devices
  • High 8.2
    CVE-2019-1662

    Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability

    A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authenticatio…

    Cisco Cisco Prime Collaboration Assurance Network devices
  • High 7.4
    CVE-2019-1659

    Cisco Prime Infrastructure Certificate Validation Vulnerability

    A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established betwee…

    Cisco Cisco Prime Infrastructure Network devices