Skip to content
OpenAdvisories

Archive

2 April 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 7.5

    CoAPthon DoS due to Exceptions

    The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect C…

  • High 7.5

    CoAPthon3 vulnerable to Deserialization of Untrusted Data

    The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they r…

  • High 7.1

    An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, ver…

  • High 8.1

    High severity vulnerability that affects com.github.shyiko.ktlint:ktlint-core

    Using ktlint to download and execute custom rulesets can result in arbitrary code execution as the served jars can be compromised by a MITM. This attack is exploitable via Man in the Middle of the HTTP connection to the artifact servers. This vulnerability ap…

  • High 8.8

    IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute…

  • High 7.7

    IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories …

  • High 7.1

    IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) …