Skip to content
OpenAdvisories

Archive

5 March 2019

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.1

    HashiCorp Consul Access Restriction Bypass

    HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "<hidden>" as its secret is …

  • High 7.5

    Stack Overflow in Apache Mesos

    When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1, and 1.7.0 might overflow the stack due to unbounded recursion. A malicious actor can therefore cause…

  • High 7.4

    IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing at…

  • High 7.3

    Local root exploit via inclusion of attacker controlled shell script

    Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges

  • High 7.5
    CVE-2019-6223 Exploited

    A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. …

    KEV Nov 3, 2021