Skip to content
OpenAdvisories

Archive

July 2019

Vulnerabilities first published in this month (UTC), newest first.

← June 2019 2019 / July August 2019 →
  1. 160
  2. 268
  3. 397
  4. 448
  5. 561
  6. 619
  7. 74
  8. 833
  9. 937
  10. 1090
  11. 1184
  12. 1211
  13. 132
  14. 146
  15. 1585
  16. 1636
  17. 1768
  18. 1860
  19. 1950
  20. 20 
  21. 2113
  22. 2236
  23. 23244
  24. 2422
  25. 2569
  26. 2636
  27. 2720
  28. 2820
  29. 2987
  30. 3095
  31. 3162
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 7.5
    CVE-2019-14439 Public exploit EPSS 11%

    Deserialization of untrusted data in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in …

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • High 7.8
    CVE-2019-1132 Exploited Public exploit

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows Windows Server Windows
    KEV Mar 15, 2022
  • High 7.5
    CVE-2019-14322 Public exploit Scanner template EPSS 56%

    Pallets Werkzeug vulnerable to Path Traversal

    In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

    werkzeug PyPI
  • High 8.8
    CVE-2019-11707 Exploited Public exploit EPSS 38%

    A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
    KEV May 23, 2022
  • High 8.1
    CVE-2019-1579 Exploited · Ransomware Public exploit EPSS 44%

    Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with Glo…

    KEV Jan 10, 2022
  • High 8.8
    CVE-2019-1010054 Public exploit

    Dolibarr Cross Site Request Forgery (CSRF)

    Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encrypta…

    Dolibarr ERP & CRM Dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 7.8
    CVE-2019-13272 Exploited Public exploit EPSS 52%

    In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proc…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
    KEV Dec 10, 2021
  • High 8.8
    CVE-2019-12991 Exploited Public exploit EPSS 74%

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of…

    KEV Mar 25, 2022
  • High 8.8
    CVE-2019-1068 Exploited Public exploit EPSS 57%

    A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal…

    Microsoft Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) Microsoft SQL Server Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
    KEV Aug 26, 2026
  • High 7.8
    CVE-2019-13574 Public exploit

    OS Command Injection in MiniMagick

    In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command.

    mini_magick ruby-mini-magick ruby-mini-magick Debian Ubuntu RubyGems
  • High 7.8
    CVE-2019-0053 Public exploit

    Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow

    Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of envir…

    Juniper Networks Junos OS inetutils inetutils Network devices Debian Ubuntu
  • High 7.5
    CVE-2018-18326 Public exploit EPSS 54%

    Insufficient Entropy in DotNetNuke

    DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.

    DotNetNuke.Core NuGet
  • High 7.5
    CVE-2018-18325 Exploited Public exploit Scanner template EPSS 74%

    Inadequate Encryption Strength in DotNetNuke

    DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.

    DotNetNuke.Core NuGet
    KEV Nov 3, 2021
  • High 7.5
    CVE-2018-15812 Public exploit EPSS 47%

    Insufficient Entropy in DotNetNuke

    DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

    DotNetNuke.Core NuGet
  • High 7.5
    CVE-2018-15811 Exploited Public exploit Scanner template EPSS 76%

    Inadequate Encryption Strength in DotNetNuke

    DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

    DotNetNuke.Core NuGet
    KEV Nov 3, 2021