Skip to content
OpenAdvisories

Archive

24 April 2019

Vulnerabilities first published on this day (UTC), newest first.

← March 2019 2019 / April /24 May 2019 →
  1. 150
  2. 239
  3. 3202
  4. 499
  5. 522
  6. 63
  7. 77
  8. 881
  9. 9169
  10. 1054
  11. 1133
  12. 1225
  13. 132
  14. 141
  15. 1522
  16. 164
  17. 1772
  18. 1862
  19. 1929
  20. 2011
  21. 2126
  22. 2252
  23. 23188
  24. 2442
  25. 2569
  26. 2658
  27. 273
  28. 284
  29. 2926
  30. 3077
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2019-11504 Public exploit

    Zotonic before version 0.47 has mod_admin XSS.

  • Critical 9.8
    CVE-2018-20434 Public exploit EPSS 71%

    LibreNMS arbitrary OS commands execution

    LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=l…

    librenms/librenms Packagist
  • Unscored —
    CVE-2019-10008 Public exploit EPSS 19%

    Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest sessio…

  • Unscored —
    CVE-2019-7213 Public exploit EPSS 42%

    SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrar…

  • Unscored —
    CVE-2019-7214 Public exploit EPSS 85%

    SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker c…