Skip to content
OpenAdvisories

Archive

23 April 2019

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2019-2721 Public exploit

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

  • Unscored —
    CVE-2019-2698 Public exploit EPSS 12%

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are J…

  • Unscored —
    CVE-2019-2697 Public exploit EPSS 11%

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are J…

  • High 7.2
    CVE-2019-2616 Exploited Public exploit Scanner template EPSS 92%

    Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publ…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2019-2618 Public exploit EPSS 33%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …

  • Unscored —
    CVE-2019-2615 Public exploit

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …

  • Unscored —
    CVE-2019-2588 Public exploit Scanner template EPSS 37%

    Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publ…

  • Unscored —
    CVE-2019-2557 Public exploit

    Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcompone…

  • Unscored —
    CVE-2019-11076 Public exploit

    Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.

  • High 8.8
    CVE-2019-7304 Public exploit EPSS 61%

    Local privilege escalation via snapd socket

    Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.

  • Medium 5.7
    CVE-2019-7303 Public exploit

    Snapd seccomp filter TIOCSTI ioctl bypass

    A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, …

  • Unscored —
    CVE-2019-11469 Public exploit EPSS 17%

    Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subseque…