Skip to content
OpenAdvisories

Archive

27 June 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 8.5

    Directory Traversal vulnerability could lead to elevated privileges

    Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input.

  • High 8.0

    Command Injection could allow authenticated users to execute arbitrary code

    Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

  • High 8.0

    Command Injection could allow authenticated users to execute arbitrary code

    Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

  • High 8.3

    Application protections bypass vulnerability could allow unauthenticated user to impersonate system users

    Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.

  • High 7.5

    Privilege escalation could allow authenticated user to gain access to a core system

    Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control.

  • High 8.1

    LinOTP replay vulnerability with auto resynchronization enabled for TOTP token

    KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).

  • High 7.5
    CVE-2019-1621 Public exploit EPSS 30%

    Cisco Data Center Network Manager Arbitrary File Download Vulnerability

    A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settin…