Skip to content
OpenAdvisories

Archive

11 July 2019

Vulnerabilities first published on this day (UTC), newest first.

← June 2019 2019 / July /11 August 2019 →
  1. 160
  2. 268
  3. 397
  4. 448
  5. 561
  6. 619
  7. 74
  8. 833
  9. 937
  10. 1090
  11. 1184
  12. 1211
  13. 132
  14. 146
  15. 1585
  16. 1636
  17. 1768
  18. 1860
  19. 1950
  20. 20 
  21. 2113
  22. 2236
  23. 23244
  24. 2422
  25. 2569
  26. 2636
  27. 2720
  28. 2820
  29. 2987
  30. 3095
  31. 3162
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.8
    CVE-2018-17196

    Improper Input Validation in Apache Kafka

    In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vu…

    Apache Kafka org.apache.kafka:kafka Maven
  • High 7.8
    CVE-2019-0053 Public exploit

    Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow

    Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of envir…

    Juniper Networks Junos OS inetutils inetutils Network devices Debian Ubuntu
  • High 7.5
    CVE-2019-0052

    SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets

    The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2019-0049

    Junos OS: RPD process crashes when BGP peer restarts

    On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol d…

    Juniper Networks Junos OS Network devices
  • High 7.2
    CVE-2019-10192 EPSS 26%

    A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x …

    Redis Redis redis redis Debian Ubuntu Alpine
  • High 7.2
    CVE-2019-10193 EPSS 23%

    A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x…

    Redis Redis redis redis Debian Alpine
  • High 8.8
    CVE-2019-10347

    Stored credentials unencrypted in Jenkins Mashup Portlets Plugin

    Jenkins Mashup Portlets Plugin stored credentials unencrypted on the Jenkins master where they can be viewed by users with access to the master file system.

    Jenkins Project Jenkins Mashup Portlets Plugin javagh.jenkins:mashup-portlets-plugin Web / CMS Maven
  • High 8.8
    CVE-2019-10340

    Jenkins Docker Plugin contains Cross-Site Request Forgery

    A cross-site request forgery vulnerability in Jenkins Docker Plugin 1.1.6 and earlier in DockerAPI.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained…

    Jenkins Project Jenkins Docker Plugin io.jenkins.docker:docker-plugin Web / CMS Maven
  • High 7.2
    CVE-2019-10135

    A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the …

    Red Hat osbs-client