Archive
12 June 2019
Vulnerabilities first published on this day (UTC), newest first.
126 results · Feed
-
Unscored —
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is n…
-
Medium 5.4
It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Applicat…
-
Medium 5.3
Credential exposure through log files in Undertow
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER…
-
Medium 6.4
It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude paramet…
-
Medium 5.9
It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using…
-
Medium 5.3
A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restric…