Skip to content
OpenAdvisories

Archive

12 June 2019

Vulnerabilities first published on this day (UTC), newest first.

126 results · Feed

  • Unscored —

    A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is n…

  • Medium 5.4

    It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Applicat…

  • Medium 5.3

    Credential exposure through log files in Undertow

    A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER…

  • Medium 6.4

    It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude paramet…

  • Medium 5.9

    It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using…

  • Medium 5.3

    A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restric…