Skip to content
OpenAdvisories

Archive

3 April 2019

Vulnerabilities first published on this day (UTC), newest first.

← March 2019 2019 / April /3 May 2019 →
  1. 150
  2. 239
  3. 3202
  4. 499
  5. 522
  6. 63
  7. 77
  8. 881
  9. 9169
  10. 1054
  11. 1133
  12. 1225
  13. 132
  14. 141
  15. 1522
  16. 164
  17. 1772
  18. 1862
  19. 1929
  20. 2011
  21. 2126
  22. 2252
  23. 23188
  24. 2442
  25. 2569
  26. 2658
  27. 273
  28. 284
  29. 2926
  30. 3077
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2019-10240

    Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit

    Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit m…

    The Eclipse Foundation Eclipse hawkBit org.eclipse.hawkbit:hawkbit-parent org.eclipse.hawkbit:hawkbit-starters Maven
  • High 7.8
    CVE-2018-4344 Exploited

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, ma…

    macOS iOS
    KEV Jun 27, 2022
  • High —
    CVE-2019-5423

    Path Traversal in http-live-simulator

    Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.

    npm http-live-simulator http-live-simulator npm
  • High —
    CVE-2019-5422

    Cross-Site Scripting in buttle

    XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.

    npm buttle buttle npm
  • High 8.4
    CVE-2018-1936

    IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bound…

    IBM Db2
  • High 8.4
    CVE-2019-4014

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer o…

    IBM Db2