Skip to content
OpenAdvisories

Archive

29 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /29 June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium —
    GHSA-2hwp-g4g7-mwwj

    Reflected Cross-Site Scripting in jquery.terminal

    Versions of `jquery.terminal` prior to 1.21.0 are vulnerable to Reflected Cross-Site Scripting. If the application has either of the options `anyLinks` or `invokeMethods` set to true, the application may execute arbitrary JavaScript through crafted malicious …

    jquery.terminal npm
  • Medium 5.5
    CVE-2019-11896

    Incorrect pviilege assignment in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC)

    A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerabi…

    Bosch Smart Home Controller
  • Medium 5.3
    CVE-2019-11895

    Improper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)

    A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators. In order to exploit th…

    Bosch Smart Home Controller
  • Medium 5.7
    CVE-2019-11894

    Improper access control in the backup mechanism of the Bosch Smart Home Controller (SHC)

    A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup. In order to exploit the vulnerability, the adversary needs to downlo…

    Bosch Smart Home Controller
  • Medium 5.5
    CVE-2019-11893

    Incorrect privilege assignment in the app permission update API of the Bosch Smart Home Controller (SHC)

    A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerabili…

    Bosch Smart Home Controller
  • Medium —
    GHSA-2xv3-h762-ccxv

    Out-of-bounds Read in concat-with-sourcemaps

    Versions of `concat-with-sourcemaps` before 1.0.6 allocates uninitialized Buffers when a number is passed as a separator. ## Recommendation Update to version 1.0.6 or later.

    concat-with-sourcemaps npm
  • Medium 4.3
    CVE-2018-13383 Exploited · Ransomware EPSS 31%

    A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and …

    Fortinet Fortinet FortiOS and FortiProxy Network devices
    KEV Jan 10, 2022
  • Medium 6.1
    CVE-2019-4137

    IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site scripting. This vulnerability…

    IBM Spectrum Control Standard Edition
  • Medium 5.9
    CVE-2019-4264

    IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity u…

    IBM QRadar SIEM
  • Medium 5.9
    CVE-2019-4256

    IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an attacker…

    IBM API Connect
  • Medium 5.9
    CVE-2019-4138

    IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive informa…

    IBM Spectrum Control Standard Edition
  • Medium 5.4
    CVE-2019-4184

    IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users t…

    IBM Jazz Reporting Service
  • Medium 5.4
    CVE-2019-4139

    IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to…

    IBM Cognos Analytics