Skip to content
OpenAdvisories

Archive

26 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /26 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2019-10154

    Moodle all messaging conversations could be viewed

    A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations.

    Moodle moodle moodle/moodle Web / CMS Packagist
  • Medium 4.2
    CVE-2019-10134

    Moodle Private files uploaded via incoming mail processing could bypass quota restrictions

    A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.

    Moodle moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 5.9
    CVE-2019-4235

    IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default,…

    IBM PureApplication System
  • Medium 4.3
    CVE-2019-4234

    IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor.…

    IBM PureApplication System
  • Medium 4.4
    CVE-2019-4225

    IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be …

    IBM PureApplication System
  • Medium 6.3
    CVE-2019-4224

    IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send special…

    IBM PureApplication System
  • Medium 5.5
    CVE-2019-6163

    A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow servic…

    Lenovo System Update
  • Medium 5.4
    CVE-2019-6166

    A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.

    Lenovo Service Bridge
  • Medium 6.5
    CVE-2019-6169

    A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.

    Lenovo Service Bridge