Skip to content
OpenAdvisories

Archive

21 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /21 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-10072 EPSS 73%

    Improper Locking in Apache Tomcat

    The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5.0 to 8.5.40 . By not sending WINDOW_UPDATE messages for the connection window (stream 0) clients wer…

    tomcat8 tomcat9 tomcat9 org.apache.tomcat.embed:tomcat-embed-core Debian Ubuntu Maven
  • High 8.8
    CVE-2019-1904

    Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based UI (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for th…

    Cisco Cisco IOS XE Software iOS Network devices