Skip to content
OpenAdvisories

Archive

30 August 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5

    Mule modules contain Directory Traversal

    Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gatew…

  • High 8.2

    Code execution on Windows via OpenSSL engine injection

    An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server to run attacker defined code as the user running the utility. This issue MongoDB Serve…