Archive
19 June 2019
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Critical 9.8
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…
-
Unscored —CVE-2019-2025 Public exploit
In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local…
-
Unscored —CVE-2019-2023 Public exploit
In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PI…
-
Unscored —CVE-2019-12890 Public exploit
RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create ad…
-
Unscored —CVE-2019-9701 Public exploit
DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue t…
-
Unscored —
An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication pack…
-
Medium 5.9
Deserialization of untrusted data in FasterXML jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the class…