Skip to content
OpenAdvisories

Archive

14 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /14 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • High 7.5
    CVE-2019-1057

    MS XML Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system. To exploit th…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • High 7.6
    CVE-2019-9506 Public exploit

    Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation

    The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can dec…

    Bluetooth BR/EDR linux-raspi2 linux-hwe Debian Ubuntu
  • High 7.1
    CVE-2019-3639

    MWG UI: Cross-Frame Scripting vulnerability

    Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header.

    McAfee McAfee Web Gateway (MWG)
  • High 8.1
    CVE-2019-10201

    Improper Verification of Cryptographic Signature in keycloak

    It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. An attac…

    Red Hat keycloak org.keycloak:keycloak-core Maven
  • High 7.8
    CVE-2019-8062

    Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful …

    Adobe Adobe After Effects