Skip to content
OpenAdvisories

Archive

24 June 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2019-12323 Public exploit

    The HC.Server service in Hosting Controller HC10 10.14 allows an Invalid Pointer Write DoS.

  • Medium 5.9
    CVE-2019-12384 Public exploit EPSS 45%

    Deserialization of Untrusted Data in FasterXML jackson-databind

    FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.

  • Unscored —
    CVE-2019-12928 Public exploit EPSS 23%

    The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remot…