Skip to content
OpenAdvisories

Archive

4 April 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2019-10867 Public exploit EPSS 71%

    Pimcore Unserialize Remote Code Execution

    An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to bu…

  • Unscored —
    CVE-2019-10863 Public exploit EPSS 13%

    A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows o…

  • Unscored —
    CVE-2019-10273 Public exploit

    Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authentica…