Skip to content
OpenAdvisories

Archive

2 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /2 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-7855

    Magento 2 Community Cryptographic Flaw

    A cryptograhic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could be abused by an unauthenticated user to discover an invariant used in gift card generation.

    magento/community-edition Web / CMS Packagist
  • Medium 5.3
    CVE-2019-7852

    Magento 2 Community Edition Path Disclosure

    A path disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Requests for a specific file path could result in a redirect to the URL of the Magento admin panel, disclosing its location to poten…

    magento/community-edition Web / CMS Packagist
  • Medium 6.5
    CVE-2019-7851

    Magento 2 Community Edition CSRF vulnerability

    A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.

    magento/community-edition Web / CMS Packagist
  • Medium 6.5
    CVE-2019-10093

    Allocation of Resources Without Limits or Throttling in Apache Tika

    In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.

    Apache Apache Tika tika org.apache.tika:tika-parsers Debian Maven
  • Medium 5.1
    CVE-2018-1987

    IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect no…

    IBM Spectrum Protect for Enterprise Resource Planning
  • Medium 6.2
    CVE-2019-4275

    IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique cat…

    IBM Jazz for Service Management
  • Medium 4.2
    CVE-2019-10176

    A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster…

    Red Hat atomic-openshift