Skip to content
OpenAdvisories

Archive

30 July 2019

Vulnerabilities first published on this day (UTC), newest first.

← June 2019 2019 / July /30 August 2019 →
  1. 160
  2. 268
  3. 397
  4. 448
  5. 561
  6. 619
  7. 74
  8. 833
  9. 937
  10. 1090
  11. 1184
  12. 1211
  13. 132
  14. 146
  15. 1585
  16. 1636
  17. 1768
  18. 1860
  19. 1950
  20. 20 
  21. 2113
  22. 2236
  23. 23244
  24. 2422
  25. 2569
  26. 2636
  27. 2720
  28. 2820
  29. 2987
  30. 3095
  31. 3162
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2019-10161

    It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSav…

    libvirt libvirt libvirt libvirt Debian Ubuntu Alpine
  • High 7.5
    CVE-2019-10152

    Podman Path Traversal Vulnerability leads to arbitrary file read/write

    A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when …

    Podman podman github.com/containers/podman Go
  • High 7.4
    CVE-2019-7615

    Elastic APM agent for Ruby vulnerable to Improper Certificate Validation

    A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'server_ca_cert' setting, the Ruby agent would not properly verify the certificate returned by the APM ser…

    Elastic Elastic APM agent for Ruby elastic-apm RubyGems
  • High 8.1
    CVE-2019-5448

    Missing Encryption of Sensitive Data in yarn

    Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.

    yarn yarn node-yarnpkg yarn Debian Wolfi npm
  • High 7.1
    CVE-2019-10142

    A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, exclud…

    Red Hat kernel linux-raspi2 linux-azure Debian Ubuntu
  • High 8.3
    CVE-2019-10141

    Openstack ironic-inspector has SQL injection vulnerability in node_cache

    A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfilter…

    Red Hat openstack-ironic-inspector ironic-inspector ironic-inspector Debian Ubuntu PyPI
  • High 7.5
    CVE-2018-16871

    A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacke…

    Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  • High 7.1
    CVE-2019-10138

    Improper Access Control in novajoin

    A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.

    Red Hat python-novajoin novajoin PyPI
  • High 7.1
    CVE-2019-4456

    IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection (X…

    IBM Daeja ViewONE
  • High 7.1
    CVE-2019-4062

    IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection (XXE) attack …

    IBM i2 Analyst's Notebook
  • High 7.5
    CVE-2019-14439 Public exploit EPSS 11%

    Deserialization of untrusted data in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in …

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven