Skip to content
OpenAdvisories

Archive

7 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /7 June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2019-7541 Public exploit

    Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.

  • High 7.5
    CVE-2019-10742 Public exploit

    Denial of Service in axios

    Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.

    axios axios node-axios axios Debian npm
  • Unscored —
    CVE-2018-20503 Public exploit

    Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.

  • Unscored —
    CVE-2018-14485 Public exploit EPSS 16%

    BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

  • Unscored —
    CVE-2019-10869 Public exploit

    Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uplo…