Skip to content
OpenAdvisories

Archive

June 2019

Vulnerabilities first published in this month (UTC), newest first.

← May 2019 2019 / June July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

154 results · Clear filters · Feed

  • High —
    GHSA-wfp9-vr4j-f49j

    NoSQL Injection in sequelize

    Versions of `sequelize` prior to 4.12.0 are vulnerable to NoSQL Injection. Query operators such as `$gt` are not properly sanitized and may allow an attacker to alter data queries, leading to NoSQL Injection. ## Recommendation Upgrade to version 4.12.0 or lat…

    sequelize npm
  • High 7.5
    GHSA-5v72-xg48-5rpm

    Denial of Service in ws

    Affected versions of `ws` can crash when a specially crafted `Sec-WebSocket-Extensions` header containing `Object.prototype` property names as extension or parameter names is sent. ## Proof of concept ``` const WebSocket = require('ws'); const net = require('…

    ws npm
  • High —
    GHSA-m734-r4g6-34f9

    NoSQL Injection in loopback-connector-mongodb

    Versions of `loopback-connector-mongodb` before 3.6.0 are vulnerable to NoSQL injection. MongoDB Connector for LoopBack fails to properly sanitize a filter passed to query the database by allowing the dangerous `$where` property to be passed to the MongoDB Dr…

    loopback-connector-mongodb npm
  • High —
    GHSA-m8fw-534v-xm85

    Cross-Site Scripting (XSS) in cloudcmd

    Versions of `cloudcmd` before 9.1.6 are vulnerable to cross-site scripting (XSS) when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. ## Recommendation Update to version 9.1.6 or later.

    cloudcmd npm
  • High 7.5
    GHSA-pgcr-7wm4-mcv6

    Sensitive Data Exposure in pem

    Versions of `pem` before 1.13.2 expose sensitive data when the `readPkcs12` is used. The `readPkcs12` function reads the certificate and key data from a pkcs12 file using the encryption password. As part of this process it creates a globally readable file wit…

    pem npm
  • High 8.1
    CVE-2019-12728

    Incorrect Resource Transfer Between Spheres in Grails

    Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP.

    org.grails:grails-core Maven
  • High 8.6
    CVE-2017-14853

    The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a searc…

  • High 8.6
    CVE-2017-14852

    An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, du…

  • High 8.0
    CVE-2019-3846

    A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel modu…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 7.0
    CVE-2019-10145

    rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `…

    [UNKNOWN] rkt rkt Ubuntu
  • High 7.0
    CVE-2019-10144

    rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `…

    [UNKNOWN] rkt rkt Ubuntu
  • High 7.8
    CVE-2019-6743

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser …

    Xiaomi Browser
  • High 7.8
    CVE-2019-6763

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.…

    Foxit Reader
  • High 7.8
    CVE-2019-6762

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.…

    Foxit PhantomPDF
  • High 7.8
    CVE-2019-6759

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10…

    Foxit Reader
  • High 7.8
    CVE-2019-6761

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.0.…

    Foxit Reader
  • High 7.8
    CVE-2019-6757

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16…

    Foxit Reader
  • High 7.0
    CVE-2019-6768

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.…

    Foxit Reader
  • High 7.8
    CVE-2019-6765

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.…

    Foxit PhantomPDF
  • High 7.8
    CVE-2019-6764

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.…

    Foxit Reader
  • High 7.8
    CVE-2019-6769

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.…

    Foxit Reader
  • High 7.8
    CVE-2019-6760

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16…

    Foxit Reader
  • High 7.0
    CVE-2019-6767

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.…

    Foxit Reader
  • High 7.8
    CVE-2019-6749

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo …

    Foxit Studio Photo
  • High 7.8
    CVE-2019-6750

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo …

    Foxit Studio Photo
  • High 7.8
    CVE-2019-6748

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo …

    Foxit Studio Photo
  • High 7.8
    CVE-2019-6755

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10…

    Foxit Reader
  • High 7.8
    CVE-2019-6747

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo …

    Foxit Studio Photo
  • High 7.8
    CVE-2019-6751

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo …

    Foxit Studio Photo
  • High 7.3
    CVE-2019-6754

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10…

    Foxit Reader
  • High 8.8
    CVE-2019-6739

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antima…

    Malwarebytes Antimalware
  • High 8.8
    CVE-2019-6738

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay…

    Bitdefender SafePay
  • High 8.8
    CVE-2019-6737

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay…

    Bitdefender SafePay
  • High 8.8
    CVE-2019-6736

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay…

    Bitdefender SafePay