Skip to content
OpenAdvisories

Archive

17 April 2019

Vulnerabilities first published on this day (UTC), newest first.

← March 2019 2019 / April /17 May 2019 →
  1. 150
  2. 239
  3. 3202
  4. 499
  5. 522
  6. 63
  7. 77
  8. 881
  9. 9169
  10. 1054
  11. 1133
  12. 1225
  13. 132
  14. 141
  15. 1522
  16. 164
  17. 1772
  18. 1862
  19. 1929
  20. 2011
  21. 2126
  22. 2252
  23. 23188
  24. 2442
  25. 2569
  26. 2658
  27. 273
  28. 284
  29. 2926
  30. 3077
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.8
    CVE-2019-1712

    Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability

    A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting in a denial of service condition on an affected device. The vulnerabili…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 5.3
    CVE-2019-1718

    Cisco Identity Services Engine SSL Renegotiation Denial of Service Vulnerability

    A vulnerability in the web interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of Secure S…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 5.3
    CVE-2019-1711

    Cisco IOS XR gRPC Software Denial of Service Vulnerability

    A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of gRPC re…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 5.8
    CVE-2019-1686

    Cisco ASR 9000 Series Aggregation Services Routers ACL Bypass Vulnerability

    A vulnerability in the TCP flags inspection feature for access control lists (ACLs) on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected device. T…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 5.3
    CVE-2018-0382

    Cisco Wireless LAN Controller Software Session Hijacking Vulnerability

    A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnera…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 6.8
    CVE-2018-0248

    Cisco Wireless LAN Controller Software GUI Configuration Denial of Service Vulnerabilities

    A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is usin…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 6.5
    CVE-2018-20028

    Contao Information Disclosure via Access Control Flaws

    Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control.

    contao/contao Packagist
  • Medium 6.0
    CVE-2019-3798

    Escalation of Privileges in Cloud Controller

    Cloud Foundry Cloud Controller API Release, versions prior to 1.79.0, contains improper authentication when validating user permissions. A remote authenticated malicious user with the ability to create UAA clients and knowledge of the email of a victim in the…

    Cloud Foundry CAPI-release
  • Medium 5.3
    CVE-2019-3883

    In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worke…

    Red Hat 389-ds-base 389-ds-base 389-ds-base Debian Ubuntu