Skip to content
OpenAdvisories

Archive

20 April 2019

Vulnerabilities first published on this day (UTC), newest first.

← March 2019 2019 / April /20 May 2019 →
  1. 150
  2. 239
  3. 3202
  4. 499
  5. 522
  6. 63
  7. 77
  8. 881
  9. 9169
  10. 1054
  11. 1133
  12. 1225
  13. 132
  14. 141
  15. 1522
  16. 164
  17. 1772
  18. 1862
  19. 1929
  20. 2011
  21. 2126
  22. 2252
  23. 23188
  24. 2442
  25. 2569
  26. 2658
  27. 273
  28. 284
  29. 2926
  30. 3077
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2019-11371

    BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2b…

    bwa bwa Debian Ubuntu
  • Unscored —
    CVE-2019-11378

    An issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../ directory traversal. …

  • Unscored —
    CVE-2019-11377

    wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php i…

  • Unscored —
    CVE-2019-11376

    SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE…

  • Unscored —
    CVE-2019-11375 Public exploit

    Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.

  • Unscored —
    CVE-2019-11374 Public exploit

    74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.

  • Unscored —
    CVE-2019-11373

    An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12…

    libmediainfo libmediainfo Debian Ubuntu
  • Unscored —
    CVE-2019-11372

    An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaAr…

    libmediainfo libmediainfo Debian Ubuntu
  • Unscored —
    CVE-2019-11366

    An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the cur…

    atftp atftp Debian Ubuntu
  • Unscored —
    CVE-2019-11365

    An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based …

    atftp atftp Debian Ubuntu
  • Unscored —
    CVE-2019-11362

    app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, a…