Skip to content
OpenAdvisories

Archive

February 2019

Vulnerabilities first published in this month (UTC), newest first.

← January 2019 2019 / February March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.8
    CVE-2019-1674 Public exploit

    Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability

    A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient …

    Cisco Cisco Webex Meetings Desktop App Cisco Webex Productivity Tools Network devices
  • High 8.8
    CVE-2019-9082 Exploited Public exploit EPSS 97%

    ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public…

    KEV Nov 3, 2021
  • High 8.1
    CVE-2019-6340 Exploited Public exploit EPSS 92%

    Drupal core - Highly critical - Remote Code Execution

    Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions …

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
    KEV Mar 25, 2022
  • High 7.8
    CVE-2019-3475 Public exploit

    Local privilege escalation in Filr famtd

    A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.

    Micro Focus Filr
  • High 7.5
    CVE-2019-8903 Public exploit EPSS 72%

    Path Traversal in total.js

    index.js in Total.js Platform before 3.2.3 allows path traversal.

    total.js npm
  • High 7.5
    CVE-2019-8394 Exploited Public exploit EPSS 63%

    Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via …

    KEV Nov 3, 2021
  • High 8.8
    CVE-2019-1003005 Public exploit EPSS 20%

    Sandbox Bypass in Script Security Plugin

    A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script…

    Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  • High 7.8
    CVE-2018-20250 Exploited · Ransomware Public exploit EPSS 96%

    In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field …

    Check Point Software Technologies WinRAR Network devices
    KEV Feb 15, 2022