Skip to content
OpenAdvisories

Archive

21 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /21 June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2019-10066

    An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17,…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2019-9892

    An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2019-10067

    An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2019-6513

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation,…

  • Unscored —
    CVE-2019-12270

    OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. Du…

  • Unscored —
    CVE-2019-12269

    Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to d…

    enigmail enigmail Debian Ubuntu
  • Unscored —
    CVE-2019-12189 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field.

  • Unscored —
    CVE-2019-12190

    XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php…

  • Unscored —
    CVE-2019-12252 Public exploit

    In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post…

  • Unscored —
    CVE-2019-12253

    my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.

  • Unscored —
    CVE-2019-12251

    sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.

  • Unscored —
    CVE-2019-12250

    IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddl…

  • Unscored —
    CVE-2019-10319

    A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.Descr…

    Jenkins Project Jenkins PAM Authentication Plugin Web / CMS
  • Medium 4.3
    CVE-2019-10320

    Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin

    Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#…

    Jenkins Project Jenkins Credentials Plugin org.jenkins-ci.plugins:credentials Web / CMS Maven