Skip to content
OpenAdvisories

Archive

22 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /22 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2019-7617

    Elastic APM agent for Python client CGI proxy redirection flaw

    When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choo…

    Elastic Elastic APM agent for Python elastic-apm PyPI
  • High 7.5
    CVE-2019-14751 Public exploit

    NLTK Vulnerable To Path Traversal

    NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.

    nltk nltk nltk Debian Ubuntu PyPI
  • High 7.5
    CVE-2019-9154

    Improper Key Verification in openpgp

    Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to pass off unsigned data as signed.

    openpgp npm
  • High 7.5
    CVE-2019-9153 Public exploit

    Message Signature Bypass in openpgp

    Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature.

    openpgp npm