Skip to content
OpenAdvisories

Archive

July 2019

Vulnerabilities first published in this month (UTC), newest first.

← June 2019 2019 / July August 2019 →
  1. 160
  2. 268
  3. 397
  4. 448
  5. 561
  6. 619
  7. 74
  8. 833
  9. 937
  10. 1090
  11. 1184
  12. 1211
  13. 132
  14. 146
  15. 1585
  16. 1636
  17. 1768
  18. 1860
  19. 1950
  20. 20 
  21. 2113
  22. 2236
  23. 23244
  24. 2422
  25. 2569
  26. 2636
  27. 2720
  28. 2820
  29. 2987
  30. 3095
  31. 3162
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-14271 Public exploit EPSS 19%

    Moby Docker cp broken with debian containers

    In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

    docker.io docker github.com/docker/docker github.com/moby/moby Debian Alpine Go
  • Critical 9.8
    CVE-2019-13990 Public exploit EPSS 17%

    XML external entity injection in Terracotta Quartz Scheduler

    initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

    libquartz-java libquartz2-java libquartz2-java libquartz-java Debian Ubuntu Maven
  • Critical 9.1
    CVE-2019-10744 Public exploit

    Prototype Pollution in lodash

    Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

    snyk lodash js-jquery lodash Debian Azure Linux npm RubyGems
  • Critical 10.0
    CVE-2019-11708 Exploited Public exploit EPSS 56%

    Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
    KEV May 23, 2022
  • Critical 9.8
    CVE-2019-1010268 Public exploit

    Improper Restriction of XML External Entity Reference in ladon

    Ladon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML External Entity (XXE). The impact is: Information Disclosure, reading files and reaching internal network endpoints. The component is: SOAP request handlers. For instance: …

    Ladon Ladon ladon PyPI
  • Critical 9.8
    CVE-2019-12989 Exploited Public exploit Scanner template EPSS 95%

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-7256 Exploited Public exploit Scanner template EPSS 97%

    Linear eMerge E3-Series devices allow Command Injections.

    KEV Mar 25, 2024