Skip to content
OpenAdvisories

Archive

6 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /6 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • High 7.4
    CVE-2019-8320

    RubyGems Delete directory using symlink when decompressing tar

    A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2. Before making new directories or touching files (which now include path-checking code for symlinks), it would delete the target destination. If that destination was hidden b…

    ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine RubyGems
  • Unscored —
    CVE-2019-5219

    There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.…

    Huawei Mate10 Network devices
  • Unscored —
    CVE-2019-5295

    Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass…

    Huawei Honor V10 Network devices
  • Unscored —
    CVE-2019-5305

    The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory dou…

    Huawei Mate 10 Network devices
  • Unscored —
    CVE-2019-5216

    There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C…

    Huawei Honor V10, Honor 10, Honor Play Network devices
  • Unscored —
    CVE-2019-5242

    There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can …

    Huawei PCManager Network devices
  • Unscored —
    CVE-2019-5241

    There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacke…

    Huawei PCManager Network devices
  • Unscored —
    CVE-2019-5214

    There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than …

    Huawei Huawei Mate10 Network devices
  • Unscored —
    CVE-2019-11080 Public exploit EPSS 14%

    Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # …

  • Unscored —
    CVE-2019-12134

    CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in Workday through 32 via a…

  • Medium 6.5
    CVE-2018-2028

    IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which…

    IBM Maximo Asset Management
  • Medium 6.2
    CVE-2019-4220

    IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sens…

    IBM InfoSphere Information Server
  • Low 2.1
    CVE-2019-4048

    IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previo…

    IBM Maximo Asset Management
  • Medium 4.3
    CVE-2019-4056

    IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers t…

    IBM Maximo Asset Management
  • High 7.4
    CVE-2019-4201

    IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, …

    IBM Jazz for Service Management
  • High 8.3
    CVE-2019-4185

    IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configu…

    IBM InfoSphere Information Server
  • Unscored —
    CVE-2019-7553

    PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name…