Skip to content
OpenAdvisories

Archive

February 2019

Vulnerabilities first published in this month (UTC), newest first.

847 results · Feed

  • Unscored —

    In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) beca…

  • Medium 4.8

    ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities

    Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.

  • Medium 6.5

    Communication Manager Denial of Service

    A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versio…

  • High 7.5

    Pylons Colander Denial of Service vulnerability

    In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.

  • Unscored —

    Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settin…

  • Unscored —

    Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as root via shell metach…

  • Unscored —
    CVE-2019-7298 EPSS 10%

    An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability all…