Skip to content
OpenAdvisories

Archive

28 August 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 7.8
    CVE-2019-15752 Exploited Public exploit EPSS 49%

    Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-…

    KEV Nov 3, 2021
  • High 8.6

    Cisco NX-OS Software IPv6 Denial of Service Vulnerability

    A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device. The vulnerability is due to improper validation of IPv6 traffi…

  • High 7.7

    Cisco NX-OS Software Remote Management Memory Leak Denial of Service Vulnerability

    A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can depl…

  • High 8.6

    Cisco NX-OS Software Cisco Fabric Services over IP Denial of Service Vulnerability

    A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affected system. The vulnerability is due to…

  • High 7.7

    Cisco FXOS and NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability

    A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. …

  • High 8.8

    Cross-Site Request Forgery in Jenkins

    Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.

  • High 8.8

    Jenkins Splunk Plugin Sandbox Bypass

    A sandbox bypass vulnerability in Jenkins Splunk Plugin 1.7.4 and earlier allowed attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.