Skip to content
OpenAdvisories

Archive

2 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /2 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

182 results · Feed

  • Unscored —
    CVE-2017-18423

    In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273).

  • Unscored —
    CVE-2017-18422

    In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC-272).

  • Unscored —
    CVE-2017-18421

    cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271).

  • Unscored —
    CVE-2017-18420

    cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).

  • Unscored —
    CVE-2017-18419

    cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).

  • Unscored —
    CVE-2017-18418

    cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).

  • Unscored —
    CVE-2017-18417

    cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).

  • Unscored —
    CVE-2019-5501

    Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthentic…

    NETAPP Data ONTAP operating in 7-Mode
  • Unscored —
    CVE-2019-5493

    Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information…

    NETAPP Data ONTAP operating in 7-Mode
  • High 7.5
    CVE-2019-14235

    Uncontrolled Recursion in Django

    An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 oc…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2019-14233

    Django Denial-of-service in strip_tags()

    An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to the behaviour of the underlying HTMLParser, django.utils.html.strip_tags would be extremely slow to evaluate certain inputs containing large sequences…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 5.1
    CVE-2018-1987

    IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect no…

    IBM Spectrum Protect for Enterprise Resource Planning
  • Medium 6.2
    CVE-2019-4275

    IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique cat…

    IBM Jazz for Service Management
  • Unscored —
    CVE-2019-14531

    An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out of bounds read on iso9660 while parsing System U…

    sleuthkit sleuthkit Debian Ubuntu
  • Unscored —
    CVE-2019-14532

    An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an underflow on tools/ha…

    sleuthkit sleuthkit Debian Ubuntu
  • Unscored —
    CVE-2019-10938

    A vulnerability has been identified in SIPROTEC 5 devices with CPU variants CP200 (All versions < V7.59), SIPROTEC 5 de…

    Siemens SIPROTEC 5 devices with CPU variants CP200 Siemens Power Meters Series 9410 SIPROTEC 5 devices with CPU variants CP300 and CP100 ICS / OT
  • Unscored —
    CVE-2017-18416

    cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303).

  • Unscored —
    CVE-2017-18415

    cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-…

  • Unscored —
    CVE-2017-18414

    cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300).

  • Unscored —
    CVE-2017-18413

    In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears (SEC-299).

  • Medium 4.2
    CVE-2019-10176

    A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster…

    Red Hat atomic-openshift
  • Unscored —
    CVE-2017-18412

    cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an acc…

  • Unscored —
    CVE-2017-18411

    The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC…

  • High 7.5
    CVE-2019-10171

    It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied …

    Red Hat 389-ds-base
  • Unscored —
    CVE-2017-18410

    In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284).

  • Unscored —
    CVE-2017-18409

    In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283).

  • Unscored —
    CVE-2017-18408

    cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282).

  • Unscored —
    CVE-2017-18407

    cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279).

  • Unscored —
    CVE-2019-14529 Public exploit EPSS 28%

    OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php.

  • Unscored —
    CVE-2017-18406

    cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276).

  • Unscored —
    CVE-2019-14528

    GnuCOBOL 2.2 has a heap-based buffer overflow in read_literal in cobc/scanner.l via crafted COBOL source code.

    gnucobol gnucobol open-cobol Debian Ubuntu
  • Unscored —
    CVE-2017-18405

    cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345…

  • Unscored —
    CVE-2017-18404

    cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341).

  • Unscored —
    CVE-2017-18403

    cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337).

  • Unscored —
    CVE-2017-18402

    cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336).

  • Unscored —
    CVE-2017-18401

    cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334).

  • Unscored —
    CVE-2017-18400

    cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333).

  • Unscored —
    CVE-2017-18399

    cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabl…

  • Unscored —
    CVE-2017-18398

    DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331).

  • Unscored —
    CVE-2017-18397

    cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330).