Skip to content
OpenAdvisories

Archive

20 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /20 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-15890

    Deserialization of Untrusted Data in EthereumJ

    An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and decoder.readObject in crypto/ECKey.java. When a node syncs and mines a new block, arbitrary OS commands can be run on the server.

    org.ethereum:ethereumj-core Maven
  • Critical —
    GHSA-28xh-wpgr-7fm8

    Command Injection in open

    Versions of `open` before 6.0.0 are vulnerable to command injection when unsanitized user input is passed in. The package does come with the following warning in the readme: ``` The same care should be taken when calling open as if you were calling child_proc…

    open npm
  • Critical 9.3
    CVE-2019-1848

    Cisco DNA Center Authentication Bypass Vulnerability

    A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary…

    Cisco Cisco Digital Network Architecture Center (DNA Center) Network devices