Skip to content
OpenAdvisories

Archive

6 April 2019

Vulnerabilities first published on this day (UTC), newest first.

← March 2019 2019 / April /6 May 2019 →
  1. 150
  2. 239
  3. 3202
  4. 499
  5. 522
  6. 63
  7. 77
  8. 881
  9. 9169
  10. 1054
  11. 1133
  12. 1225
  13. 132
  14. 141
  15. 1522
  16. 164
  17. 1772
  18. 1862
  19. 1929
  20. 2011
  21. 2126
  22. 2252
  23. 23188
  24. 2442
  25. 2569
  26. 2658
  27. 273
  28. 284
  29. 2926
  30. 3077
All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.6
    CVE-2019-10906

    Jinja2 sandbox escape via string formatting

    In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.

    nodejs jinja2 jinja2 jinja2 Debian Ubuntu Azure Linux PyPI
  • High 8.1
    CVE-2019-10905

    Parsedown Class-Name Injection

    Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script (already running on the affected page) executes the contents of any element with a specific class. This occurs b…

    erusev/parsedown Packagist
  • Medium 6.1
    CVE-2019-10904

    Moderate severity vulnerability that affects roundup

    Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.

    roundup roundup Ubuntu PyPI