Skip to content
OpenAdvisories

Archive

19 June 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-2729 Public exploit Scanner template EPSS 89%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…

  • Unscored —
    CVE-2019-2025 Public exploit

    In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local…

  • Unscored —
    CVE-2019-2023 Public exploit

    In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PI…

  • Unscored —
    CVE-2019-12890 Public exploit

    RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create ad…

  • Unscored —
    CVE-2019-9701 Public exploit

    DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue t…

  • Unscored —
    CVE-2019-6971 Public exploit EPSS 14%

    An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication pack…

  • Medium 5.9
    CVE-2019-12814 Public exploit EPSS 11%

    Deserialization of untrusted data in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the class…