Skip to content
OpenAdvisories

Archive

25 March 2019

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2019-7642 Public exploit

    D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can r…

  • Critical 9.8
    CVE-2019-3396 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from ver…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2018-12653 Public exploit

    A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious Ja…

  • High 7.8
    CVE-2018-16858 Public exploit EPSS 67%

    It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which coul…

  • Critical 9.8
    CVE-2019-7609 Exploited Public exploit Scanner template EPSS 95%

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacke…

    KEV Jan 10, 2022
  • Medium 4.3
    CVE-2019-3810 Public exploit EPSS 14%

    Moodle XSS Vulnerability

    A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is …