Skip to content
OpenAdvisories

Archive

5 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /5 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

167 results · Feed

  • Critical 9.3
    CVE-2019-12243

    Istio may not check inbound TCP connections against istio-policy

    Istio 1.1.x through 1.1.6 has Incorrect Access Control.

    istio.io/istio Go
  • Unscored —
    CVE-2019-12538 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do search field.

  • Unscored —
    CVE-2019-5359

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5358

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5357

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5356 EPSS 11%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5355 EPSS 54%

    A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than ve…

  • Unscored —
    CVE-2019-5354

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5353

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5352

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-12541 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText pa…

  • Medium 5.9
    GHSA-2pr6-76vf-7546

    Denial of Service in js-yaml

    Versions of `js-yaml` prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service. ## Recommendation Upgrade to version 3.13.0.

    js-yaml npm
  • Unscored —
    CVE-2019-12542 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID paramet…

  • Unscored —
    CVE-2019-5351

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5350

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5349

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5348

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5347

    A remote authentication bypass vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier tha…

  • Unscored —
    CVE-2019-12543 Public exploit

    An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceReque…

  • Unscored —
    CVE-2019-5346

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5345

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5344

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5343

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5342

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5341

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5340

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5339

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5338

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2018-7125

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2018-7124

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Medium —
    GHSA-vpq5-4rc8-c222

    Denial of Service in canvas

    Versions of `canvas` prior to 1.6.10 are vulnerable to Denial of Service. Processing malicious JPEGs or GIFs could crash the node process. ## Recommendation Upgrade to version 1.6.10

    canvas npm
  • Unscored —
    CVE-2018-7123 EPSS 58%

    A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than ve…

  • Medium 5.9
    GHSA-86p3-4gfq-38f2

    Denial of Service in url-relative

    All versions of `url-relative` are vulnerable to Denial of Service. If the values `to` and `from` are equal, the function hangs and never returns. This may cause a Denial of Service. ## Recommendation No fix is currently available. Consider using an alternati…

    url-relative npm
  • Medium —
    GHSA-74cp-qw7f-7hpw

    Path Traversal in statics-server

    All versions of `statics-server` are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. ## Recommendation No fix is currently available. Consider using an alternative module until a…

    statics-server npm
  • Medium 5.3
    GHSA-xf5p-87ch-gxw2

    Marked ReDoS due to email addresses being evaluated in quadratic time

    Versions of `marked` from 0.3.14 until 0.6.2 are vulnerable to Regular Expression Denial of Service. Email addresses may be evaluated in quadratic time, allowing attackers to potentially crash the node process due to resource exhaustion. ## Recommendation Upg…

    marked npm
  • Unscored —
    CVE-2018-7122

    A remote disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier…

  • Unscored —
    CVE-2018-7121

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • Unscored —
    CVE-2019-5392 Public exploit

    A disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than v…

  • Unscored —
    CVE-2019-5393

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versi…

  • High 7.3
    GHSA-q42p-pg8m-cqh6

    Prototype Pollution in handlebars

    Versions of `handlebars` prior to 4.0.14 are vulnerable to Prototype Pollution. Templates may alter an Objects' prototype, thus allowing an attacker to execute arbitrary code on the server. ## Recommendation For handlebars 4.1.x upgrade to 4.1.2 or later. For…

    handlebars npm