Skip to content
OpenAdvisories

Archive

29 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /29 June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High —
    GHSA-p72p-rjr2-r439

    Server-Side Request Forgery in terriajs-server

    Versions of `terriajs-server`prior to 2.7.4 are vulnerable to Server-Side Request Forgery (SSRF). If an attacker has access to a server whitelisted by the terriajs-server proxy or if the attacker is able to modify the DNS records of a domain whitelisted by th…

    terriajs-server npm
  • High 7.5
    CVE-2019-11892

    Improper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)

    A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's configuration or triggering and restoring backups. In order to e…

    Bosch Smart Home Controller
  • High 8.0
    CVE-2019-11891

    Incorrect privilege assignment in the app pairing mechanism of the Bosch Smart Home Controller (SHC)

    A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the adversary's choosing. In order to exploit the vulnerability, the…

    Bosch Smart Home Controller
  • High 7.5
    CVE-2019-12452

    Containous Traefik Exposes Password Hashes

    types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control (which is contrary to the API documentation), allows remote authenticated users to discover …

    github.com/traefik/traefik Go
  • High 7.4
    CVE-2019-12439

    bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular conf…

    bubblewrap bubblewrap Debian Ubuntu