Skip to content
OpenAdvisories

Archive

February 2019

Vulnerabilities first published in this month (UTC), newest first.

← January 2019 2019 / February March 2019 →
  1. 126
  2. 2 
  3. 34
  4. 471
  5. 566
  6. 653
  7. 735
  8. 818
  9. 914
  10. 1016
  11. 1147
  12. 1235
  13. 1342
  14. 141
  15. 1531
  16. 165
  17. 1730
  18. 1843
  19. 1938
  20. 2031
  21. 2135
  22. 2216
  23. 2331
  24. 2412
  25. 2555
  26. 2619
  27. 2719
  28. 2854
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-4061 Public exploit EPSS 23%

    IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the up…

    IBM BigFix Platform
  • Medium 4.9
    CVE-2019-1698 Public exploit

    Cisco IoT Field Network Director XML External Entity Vulnerability

    A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is d…

    Cisco Cisco IoT Field Network Director (IoT-FND) Network devices
  • Medium 6.5
    CVE-2019-3474 Public exploit

    Path traversal vulnerability in Filr web application

    A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior …

    Micro Focus Filr
  • Medium 6.1
    CVE-2019-8331 Public exploit EPSS 16%

    Bootstrap Vulnerable to Cross-Site Scripting

    In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

    twitter-bootstrap3 bootstrap twitter-bootstrap3 twbs/bootstrap Debian Ubuntu npm Packagist Maven NuGet RubyGems
  • Medium 5.4
    CVE-2018-16890 Public exploit

    libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling …

    The curl Project curl curl curl Debian Ubuntu Alpine
  • Medium —
    CVE-2018-16492 Public exploit

    Prototype Pollution in extend

    A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.

    HackerOne extend node-extend node-extend Debian Ubuntu npm