Skip to content
OpenAdvisories

Archive

8 April 2019

Vulnerabilities first published on this day (UTC), newest first.

← March 2019 2019 / April /8 May 2019 →
  1. 150
  2. 239
  3. 3202
  4. 499
  5. 522
  6. 63
  7. 77
  8. 881
  9. 9169
  10. 1054
  11. 1133
  12. 1225
  13. 132
  14. 141
  15. 1522
  16. 164
  17. 1772
  18. 1862
  19. 1929
  20. 2011
  21. 2126
  22. 2252
  23. 23188
  24. 2442
  25. 2569
  26. 2658
  27. 273
  28. 284
  29. 2926
  30. 3077
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.5
    CVE-2019-0639 EPSS 12%

    High severity vulnerability that affects Microsoft.ChakraCore

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-07…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2019-0611

    High severity vulnerability that affects Microsoft.ChakraCore

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2019-0609

    High severity vulnerability that affects Microsoft.ChakraCore

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2019-0592 EPSS 23%

    High severity vulnerability that affects Microsoft.ChakraCore

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.8
    CVE-2019-0211 Exploited Public exploit EPSS 65%

    In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

    Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • High 7.5
    CVE-2019-1798

    Clam AntiVirus PE File Out-of-Bounds Read Vulnerability

    A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulner…

    Cisco ClamAV clamav libclamunrar Network devices Debian
  • High 7.5
    CVE-2019-1788

    ClamAV OLE2 File Out-Of-Bounds Write Vulnerability

    A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. T…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • High 7.5
    CVE-2019-1787

    Clam AntiVirus PDF Denial of Service Vulnerability

    A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • High 7.5
    CVE-2019-1786

    Clam AntiVirus PDF Out-of-Bounds Read Vulnerability

    A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. T…

    Cisco ClamAV clamav Network devices Debian
  • High 7.2
    CVE-2019-11001 Exploited EPSS 38%

    On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the…

    KEV Dec 18, 2024
  • High 8.8
    CVE-2019-4155

    IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integ…

    IBM API Connect
  • High 8.6
    CVE-2016-10745

    Jinja2 sandbox escape vulnerability

    In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

    jinja2 jinja2 jinja2 Debian Ubuntu PyPI