Skip to content
OpenAdvisories

Archive

February 2019

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.8
    CVE-2019-9082 Exploited Public exploit EPSS 97%

    ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public…

    KEV Nov 3, 2021
  • High 8.1
    CVE-2019-6340 Exploited Public exploit EPSS 92%

    Drupal core - Highly critical - Remote Code Execution

    Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions …

    KEV Mar 25, 2022
  • High 7.5
    CVE-2019-8394 Exploited Public exploit EPSS 63%

    Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via …

    KEV Nov 3, 2021
  • High 7.8
    CVE-2018-20250 Exploited · Ransomware Public exploit EPSS 96%

    In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field …

    KEV Feb 15, 2022