Skip to content
OpenAdvisories

Archive

August 2019

Vulnerabilities first published in this month (UTC), newest first.

← July 2019 2019 / August September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 10.0
    CVE-2019-11061 Public exploit

    HG100 has a broken access control vulnerability in its Web API Server

    A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 b…

    ASUS HG100 firmware
  • Critical 9.8
    CVE-2019-1935 Public exploit EPSS 83%

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability

    A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User accoun…

    Cisco Cisco Unified Computing System Director Network devices
  • Critical 9.8
    CVE-2019-1937 Public exploit EPSS 76%

    Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token …

    Cisco Cisco Unified Computing System Director Network devices
  • Critical 9.8
    CVE-2019-15224 Public exploit

    rest-client Gem Contains Malicious Code

    The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.

    rest-client coin_base awesome-bot capistrano-colors RubyGems
  • Critical 9.8
    CVE-2019-15107 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulner…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-11581 Exploited Public exploit Scanner template EPSS 85%

    There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators a…

    Atlassian Jira Server and Data Center Web / CMS
    KEV Mar 7, 2022
  • Critical 9.8
    CVE-2019-14234 Public exploit EPSS 48%

    SQL Injection in Django

    An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to an error in shallow key transformation, key and index lookups for django.contrib.postgres.fields.JSONField, and key lookups for django.contrib.postgre…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Critical 9.8
    CVE-2019-14537 Public exploit

    Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls

    YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

    yourls/yourls Packagist
  • Critical 9.8
    CVE-2019-1913 Public exploit EPSS 26%

    Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

    Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the unde…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • Critical 9.1
    CVE-2019-1912 Public exploit EPSS 17%

    Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management inte…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices