Skip to content
OpenAdvisories

Archive

9 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /9 June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Critical 9.8
    CVE-2019-11830

    PharStreamWrapper for Typo3 unsafe deserialization vulnerability

    PharMetaDataInterceptor in the PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 mishandles Phar stub parsing, which allows attackers to bypass a deserialization protection mechanism.

    typo3/phar-stream-wrapper Packagist
  • Medium 5.9
    CVE-2019-11840

    golang.org/x/crypto/salsa20/salsa uses insufficiently random values

    An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa package…

    k3d k3d-proxy k3d-tools snapd Debian Ubuntu Wolfi Go