Skip to content
OpenAdvisories

Archive

5 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /5 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

167 results · Feed

  • Critical 9.0
    CVE-2019-12739

    lib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows Remote Code Execution v…

  • High 8.2
    CVE-2017-6261

    NVIDIA’s Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosure

    NVIDIA Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosure.

    NVIDIA NVIDIA Vibrante Linux Linux
  • Unscored —
    CVE-2019-12735 Public exploit EPSS 19%

    getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via t…

    vim vim vim neovim Debian Ubuntu Alpine
  • High —
    GHSA-886v-mm6p-4m66

    High severity vulnerability that affects gun

    ## Urgent Upgrade The static file server module included with GUN had a **serious vulnerability**: - Using `curl --path-as-is` allowed reads on any parent directory or files. This did not work via the browser or via curl without as-is option. ### Fixed This h…

    gun npm
  • Medium 6.5
    CVE-2019-12616 Public exploit EPSS 20%

    phpMyAdmin CSRF Vulnerability

    An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAd…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • Critical 9.8
    CVE-2019-11768

    phpMyAdmin SQL injection in Designer feature

    An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • Critical 9.0
    CVE-2019-10149 Exploited Public exploit EPSS 100%

    A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine
    KEV Jan 10, 2022