Skip to content
OpenAdvisories

Archive

May 2019

Vulnerabilities first published in this month (UTC), newest first.

1,337 results · Feed

  • Unscored —

    httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr paramet…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —
    CVE-2019-8442 Scanner template EPSS 60%

    The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4…

  • Unscored —
    CVE-2019-7828 EPSS 14%

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —
    CVE-2019-3402 Scanner template

    The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows…

  • Unscored —
    CVE-2019-7827 EPSS 14%

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —
    CVE-2019-3403 Public exploit Scanner template EPSS 54%

    The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and f…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —
    CVE-2019-7824 EPSS 11%

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page.

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier ve…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —
    CVE-2019-3401 Scanner template EPSS 14%

    The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • High 8.8

    A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A …

  • Unscored —

    WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Pat…

  • Unscored —
    CVE-2019-11231 Public exploit EPSS 70%

    An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allow…

  • Critical 9.8
    CVE-2019-11634 Exploited · Ransomware

    Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

    KEV Nov 3, 2021
  • Unscored —

    This module enables you to handle fields for Custom Menu Links. The module doesn't sufficiently check requests to one o…

  • Unscored —

    CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2.

  • Unscored —
    CVE-2019-7820 EPSS 11%

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 1…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    LemonLDAP::NG -2.0.3 has Incorrect Access Control.

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —
    CVE-2019-12279 Public exploit

    Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). …

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

  • Unscored —

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier ve…