Skip to content
OpenAdvisories

Archive

16 August 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-15107 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulner…

    KEV Mar 25, 2022
  • Critical 9.8

    Nokogiri Command Injection Vulnerability

    A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called wit…