Skip to content
OpenAdvisories

Archive

19 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /19 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

95 results · Feed

  • Unscored —
    CVE-2018-18757

    Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a different vulnerability than…

  • Unscored —
    CVE-2018-18863

    NGA ResourceLink 20.0.2.1 allows local file inclusion.

  • Unscored —
    CVE-2018-18758

    Open Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different vulnerability than CVE…

  • Unscored —
    CVE-2018-19878

    An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitati…

  • Unscored —
    CVE-2019-6972

    An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-f…

  • Unscored —
    CVE-2019-6971 Public exploit EPSS 14%

    An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication pack…

  • Unscored —
    CVE-2019-10257

    Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the rest…

  • Medium 4.3
    CVE-2017-1107

    IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by …

    IBM Marketing Platform
  • Medium 4.3
    CVE-2019-4384

    IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system. An attacker could send…

    IBM Campaign
  • Medium 5.5
    CVE-2019-4364

    IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to ex…

    IBM Maximo Asset Management
  • Medium 5.4
    CVE-2019-4303

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

    IBM Maximo Asset Management
  • Medium 5.9
    CVE-2019-4385

    IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can …

    IBM Spectrum Protect Plus
  • Medium 5.9
    CVE-2019-12814 Public exploit EPSS 11%

    Deserialization of untrusted data in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the class…

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • Unscored —
    CVE-2019-12436

    Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is r…

    samba Alpine
  • Unscored —
    CVE-2019-12435

    Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is…

    samba samba Debian Alpine