Skip to content
OpenAdvisories

Archive

February 2019

Vulnerabilities first published in this month (UTC), newest first.

← January 2019 2019 / February March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • Unscored —
    CVE-2018-18500 Public exploit EPSS 13%

    A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This resul…

    thunderbird mozjs38 mozjs52 firefox Debian Ubuntu Alpine
  • High 7.8
    CVE-2018-20250 Exploited · Ransomware Public exploit EPSS 96%

    In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field …

    Check Point Software Technologies WinRAR Network devices
    KEV Feb 15, 2022
  • Critical 9.8
    CVE-2016-1000282 Public exploit EPSS 13%

    Critical severity vulnerability that affects Haraka

    Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.

    Haraka npm
  • Unscored —
    CVE-2019-7400 Public exploit

    Rukovoditel before 2.4.1 allows XSS.

  • Unscored —
    CVE-2018-15657 Public exploit

    An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.

  • Medium —
    CVE-2018-16492 Public exploit

    Prototype Pollution in extend

    A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.

    HackerOne extend node-extend node-extend Debian Ubuntu npm