Skip to content
OpenAdvisories

Archive

19 June 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.6

    Dell EMC Avamar Security Update for ADMe Web UI Vulnerability

    Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application.

  • High 8.3

    UAA defaults email address to an insecure domain

    Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @ character. This domain is held by a private company, which leads to attack vectors in…