Archive
23 April 2019
Vulnerabilities first published on this day (UTC), newest first.
12 results · Clear filters · Feed
-
Unscored —CVE-2019-2721 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are J…
-
Unscored —
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are J…
-
High 7.2
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publ…
KEV Mar 25, 2022 -
Unscored —
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …
-
Unscored —CVE-2019-2615 Public exploit
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …
-
Unscored —
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publ…
-
Unscored —CVE-2019-2557 Public exploit
Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcompone…
-
Unscored —CVE-2019-11076 Public exploit
Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.
-
High 8.8
Local privilege escalation via snapd socket
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.
-
Medium 5.7CVE-2019-7303 Public exploit
Snapd seccomp filter TIOCSTI ioctl bypass
A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, …
-
Unscored —
Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subseque…