Skip to content
OpenAdvisories

Archive

21 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /21 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-11602

    Leakage of stack traces in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software

    Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.

  • Medium 5.9
    CVE-2019-1948

    Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

    A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer (SSL) certificate. The vulnerability is due to insufficient SSL ce…

    Cisco Cisco WebEx Meetings for iOS iOS Network devices
  • Medium 6.5
    CVE-2019-1984

    Cisco Enterprise Network Functions Virtualization Infrastructure Software Arbitrary File Write Vulnerability

    A vulnerability in Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite files on the underlying operating system (OS) of an affected device. …

    Cisco Cisco Enterprise NFV Infrastructure Software Network devices
  • Medium —
    CVE-2019-15074

    MantisBT allows cross-site scripting (XSS) via crafted filename

    The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if CSP settings permit it) after uploading an attachment with a crafted filename. The code is exec…

    mantisbt/mantisbt Packagist
  • Medium 6.5
    CVE-2019-1863

    Cisco Integrated Management Controller Privilege Escalation Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to make unauthorized changes to the system configuration. The vulnerability is due to insufficient aut…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Network devices
  • Medium 6.7
    CVE-2019-1839

    Cisco Remote PHY Device Software Command Injection Vulnerability

    A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sa…

    Cisco Cisco Remote PHY Network devices
  • Medium 4.8
    CVE-2019-12626

    Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interfac…

    Cisco Cisco Unified Contact Center Express Network devices
  • Medium 5.8
    CVE-2019-12627

    Cisco Firepower Threat Defense Software Information Disclosure Vulnerability

    A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient applicati…

    Cisco Cisco Firepower Threat Defense Software Network devices
  • Medium 6.8
    CVE-2019-12621

    Cisco HyperFlex Static SSL Key Vulnerability

    A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker could exploit this vulnerability by obtaining a specific en…

    Cisco Cisco HyperFlex HX-Series Network devices
  • Medium 4.1
    CVE-2019-12622

    Cisco RoomOS Software Privilege Escalation Vulnerability

    A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient permission restrictions on a specific process. An attacker could e…

    Cisco Cisco TelePresence CE Software Network devices
  • Medium 4.3
    CVE-2019-12623

    Cisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration Vulnerability

    A vulnerability in the web server functionality of Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform file enumeration on an affected system. The vulnerability is due to t…

    Cisco Cisco Enterprise NFV Infrastructure Software Network devices
  • Medium 4.4
    CVE-2019-3634

    Buffer overflow in DLP Endpoint for Windows

    Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via an encrypted message sent to DLPe which when decrypted results in DLPe reading unallocated me…

    McAfee Data Loss Prevention (DLPe) for Windows Windows
  • Medium 4.4
    CVE-2019-3633

    Buffer overflow in DLP Endpoint for Windows

    Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via a carefully constructed message sent to DLPe which bypasses DLPe internal checks and results …

    McAfee Data Loss Prevention (DLPe) for Windows Windows