Skip to content
OpenAdvisories

Archive

2 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /2 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

182 results · Feed

  • Unscored —
    CVE-2017-18396

    cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329).

  • Unscored —
    CVE-2017-18395

    cPanel before 68.0.15 does not block a username of ssl (SEC-328).

  • Unscored —
    CVE-2017-18394

    cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327).

  • Unscored —
    CVE-2017-18393

    cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326).

  • Unscored —
    CVE-2017-18392

    cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325).

  • Unscored —
    CVE-2017-18391

    cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interva…

  • Unscored —
    CVE-2017-18390

    cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on increment…

  • Unscored —
    CVE-2017-18389

    cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).

  • Unscored —
    CVE-2017-18388

    cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315).

  • Unscored —
    CVE-2017-18387

    cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314).

  • Unscored —
    CVE-2017-18386

    cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313).

  • Unscored —
    CVE-2017-18385

    cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311).

  • Unscored —
    CVE-2017-18384

    cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310).

  • Unscored —
    CVE-2017-18383

    cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).

  • Unscored —
    CVE-2017-18382

    cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).

  • High 8.8
    CVE-2019-10168

    The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x …

    libvirt libvirt libvirt libvirt Debian Alpine
  • High 8.8
    CVE-2019-10167

    The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emu…

    libvirt libvirt libvirt libvirt Debian Ubuntu Alpine
  • High 7.8
    CVE-2019-10166

    It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to …

    libvirt libvirt libvirt libvirt Debian Ubuntu Alpine
  • High 7.8
    CVE-2014-8184

    A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTabl…

    Liblouis liblouis liblouis liblouis Debian Ubuntu
  • Unscored —
    CVE-2019-14523

    An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmt_okt_l…

    schism schism Debian Ubuntu
  • Unscored —
    CVE-2019-14524

    An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of…

    schism schism Debian Ubuntu
  • High 7.5
    CVE-2019-14232

    Django Denial-of-service in django.utils.text.Truncator

    An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI