Skip to content
OpenAdvisories

Archive

21 April 2019

Vulnerabilities first published on this day (UTC), newest first.

← March 2019 2019 / April /21 May 2019 →
  1. 150
  2. 239
  3. 3202
  4. 499
  5. 522
  6. 63
  7. 77
  8. 881
  9. 9169
  10. 1054
  11. 1133
  12. 1225
  13. 132
  14. 141
  15. 1522
  16. 164
  17. 1772
  18. 1862
  19. 1929
  20. 2011
  21. 2126
  22. 2252
  23. 23188
  24. 2442
  25. 2569
  26. 2658
  27. 273
  28. 284
  29. 2926
  30. 3077
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2019-11405

    OpenAPI Tools OpenAPI Generator uses HTTP in various files

    OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.

    org.openapitools:openapi-generator Maven
  • High 8.1
    CVE-2019-11404

    Missing Encryption of Sensitive Data in arrow-kt Arrow

    arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.

    io.arrow-kt:arrow-ank-gradle Maven
  • High 7.2
    CVE-2019-11401

    SiteServer CMS RCE via unsafe file upload

    A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.

    SSCMS NuGet