Skip to content
OpenAdvisories

Archive

7 August 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-14537 Public exploit

    Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls

    YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

  • Critical 9.8
    CVE-2019-1913 Public exploit EPSS 26%

    Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

    Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the unde…

  • Critical 9.1
    CVE-2019-1912 Public exploit EPSS 17%

    Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management inte…