Skip to content
OpenAdvisories

Archive

13 May 2019

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Medium 6.7

    Cisco Secure Boot Hardware Tampering Vulnerability

    A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability a…

  • Medium 4.0

    A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CE…

  • Medium 5.3

    An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmwa…

  • Medium 5.3

    An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashca…

  • Medium 4.0

    susemanager installer creates world-readable swap files

    SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

  • Medium 6.6

    The Simple - Better Banking application 2.45.0 through 2.45.3 (fixed in 2.46.0) for Android was affected by an informat…

  • Medium 6.1

    Cross-Site Scripting in simditor

    Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

  • Medium 6.1

    Cross-site Scripting in remarkable

    In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL.