Skip to content
OpenAdvisories

Archive

April 2019

Vulnerabilities first published in this month (UTC), newest first.

126 results · Clear filters · Feed

  • Unscored —
    CVE-2019-10692 Public exploit Scanner template EPSS 77%

    In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitiz…

  • Unscored —
    CVE-2018-19113 Public exploit

    The Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:(I)(F…

  • Unscored —
    CVE-2019-6715 Public exploit Scanner template EPSS 19%

    pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2019-8956 Public exploit

    In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sct…

  • Medium 6.4
    CVE-2019-1002101 Public exploit EPSS 13%

    kubectl cp path traversal

    The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in …

  • Unscored —
    CVE-2019-9193 Public exploit Scanner template EPSS 92%

    In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serv…