Skip to content
OpenAdvisories

Archive

May 2019

Vulnerabilities first published in this month (UTC), newest first.

← April 2019 2019 / May June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

1,337 results · Feed

  • Unscored —
    CVE-2019-7767

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7766

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7765

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7764

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier ve…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7763

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7762

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7761 EPSS 10%

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7760

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7759

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7758

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier ve…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7145

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7144

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7143

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7142

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7141

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7769

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-7140

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Medium 5.9
    CVE-2019-11841

    Golang/x/crypto message forgery vulnerability

    A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP Message Format specification in RFC 4880 chapter 7, a cleartext signed message can contain one or m…

    k3d k3d-proxy k3d-tools golang.org/x/crypto Debian Ubuntu Wolfi Go
  • Unscored —
    CVE-2019-10066

    An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17,…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2019-9892

    An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2019-10067

    An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2019-6513

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation,…

  • Unscored —
    CVE-2019-12270

    OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. Du…

  • Unscored —
    CVE-2019-12269

    Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to d…

    enigmail enigmail Debian Ubuntu
  • Unscored —
    CVE-2019-12189 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field.

  • Unscored —
    CVE-2019-12190

    XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php…

  • Unscored —
    CVE-2019-12252 Public exploit

    In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post…

  • Unscored —
    CVE-2019-12253

    my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.

  • Unscored —
    CVE-2019-12251

    sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.

  • Unscored —
    CVE-2019-12250

    IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddl…

  • Unscored —
    CVE-2019-10319

    A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.Descr…

    Jenkins Project Jenkins PAM Authentication Plugin Web / CMS
  • Medium 4.3
    CVE-2019-10320

    Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin

    Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#…

    Jenkins Project Jenkins Credentials Plugin org.jenkins-ci.plugins:credentials Web / CMS Maven
  • Unscored —
    CVE-2019-11816

    Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote auth…

  • Medium 6.1
    CVE-2019-10078 Public exploit

    Cross-site Scriptin in JSPWiki

    A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were …

    Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main org.apache.jspwiki:jspwiki-war Maven
  • Medium 6.1
    CVE-2019-10077 Public exploit

    Cross-site Scripting in JSPWiki

    A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.

    Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main org.apache.jspwiki:jspwiki-war Maven
  • Medium 6.1
    CVE-2019-10076 Public exploit

    Cross-Site Scripting in JSPWiki

    A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.

    Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main org.apache.jspwiki:jspwiki-war Maven
  • Unscored —
    CVE-2019-12241

    The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-c…

  • Unscored —
    CVE-2019-12240

    The Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or c_values in graph.php.

  • Unscored —
    CVE-2019-12239

    The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL in…

  • Unscored —
    CVE-2019-8352 Public exploit

    By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials se…