Skip to content
OpenAdvisories

Archive

5 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /5 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Unscored —
    CVE-2019-7671 Public exploit

    Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters sent to scripts are not properly sanitized before being re…

  • Unscored —
    CVE-2019-8385 Public exploit EPSS 20%

    An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated directory traversal and loc…

  • Unscored —
    CVE-2019-12276 Public exploit Scanner template EPSS 60%

    A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allow…

  • Unscored —
    CVE-2019-9189 Public exploit EPSS 11%

    Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when…

  • Medium 4.7
    CVE-2019-1881 Public exploit

    Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vul…

    Cisco Cisco Industrial Network Director Network devices
  • Unscored —
    CVE-2019-9647 Public exploit

    Gila CMS 1.9.1 has XSS.

  • Unscored —
    CVE-2019-9673 Public exploit

    Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI.

  • Unscored —
    CVE-2019-9730 Public exploit

    Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows …

  • Unscored —
    CVE-2019-12538 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do search field.

  • Unscored —
    CVE-2019-12541 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText pa…

  • Unscored —
    CVE-2019-12542 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID paramet…

  • Unscored —
    CVE-2019-12543 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceReque…

  • Unscored —
    CVE-2019-5392 Public exploit

    A disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than v…

  • Unscored —
    CVE-2019-12735 Public exploit EPSS 19%

    getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via t…

    vim vim vim neovim Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2019-12616 Public exploit EPSS 20%

    phpMyAdmin CSRF Vulnerability

    An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAd…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • Critical 9.0
    CVE-2019-10149 Exploited Public exploit EPSS 100%

    A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine
    KEV Jan 10, 2022