Skip to content
OpenAdvisories

Archive

26 July 2019

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2019-10267 Public exploit EPSS 75%

    An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to…

  • Unscored —
    CVE-2019-10266 Public exploit EPSS 13%

    An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a UR…

  • Unscored —
    CVE-2019-14280 Public exploit

    In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images wh…

  • Unscored —
    CVE-2019-5603 Public exploit

    In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE be…

  • Critical 9.8
    CVE-2019-13990 Public exploit EPSS 17%

    XML external entity injection in Terracotta Quartz Scheduler

    initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.