Skip to content
OpenAdvisories

Archive

27 March 2019

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.4
    CVE-2019-1749 Public exploit

    Cisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability

    A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting i…

  • Unscored —
    CVE-2018-19466 Public exploit

    A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master pass…

  • Critical 9.8
    CVE-2019-5420 Public exploit EPSS 89%

    Use of Insufficiently Random Values in Railties Allows Remote Code Execution

    A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalat…

  • High 7.5
    CVE-2019-5418 Exploited Public exploit Scanner template EPSS 99%

    Path Traversal in Action View

    There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

    KEV Jul 7, 2025
  • Medium 5.4
    CVE-2019-3847 Public exploit

    Moodle XSS Vulnerability

    A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to t…