Skip to content
OpenAdvisories

Archive

17 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /17 June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Unscored —
    CVE-2019-12170 Public exploit

    ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload.php (aka backup) compone…

  • Unscored —
    CVE-2018-16156 Public exploit

    In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes …

  • High 7.5
    CVE-2019-12086 Public exploit EPSS 22%

    Information exposure in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14…

    jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven
  • Unscored —
    CVE-2018-17179 Public exploit EPSS 13%

    An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the make_task function in /interface…

  • Critical 9.0
    CVE-2019-4279 Public exploit EPSS 80%

    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with…

    IBM WebSphere Application Server
  • Unscored —
    CVE-2018-19585 Public exploit EPSS 15%

    GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injectio…

  • Unscored —
    CVE-2019-8937 Public exploit Scanner template

    HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabe…

    hoteldruid hoteldruid Debian Ubuntu
  • Unscored —
    CVE-2019-8929 Public exploit EPSS 11%

    An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zo…

  • Unscored —
    CVE-2019-8928 Public exploit

    An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userMa…

  • Unscored —
    CVE-2019-8927 Public exploit

    An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zo…

  • Unscored —
    CVE-2019-8926 Public exploit

    An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zo…

  • Unscored —
    CVE-2019-8925 Public exploit EPSS 12%

    An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerab…

  • Unscored —
    CVE-2019-8924 Public exploit

    XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued.