Skip to content
OpenAdvisories

Archive

August 2019

Vulnerabilities first published in this month (UTC), newest first.

← July 2019 2019 / August September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

95 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-14537 Public exploit

    Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls

    YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

    yourls/yourls Packagist
  • Unscored —
    CVE-2019-14748 Public exploit

    An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to up…

  • Unscored —
    CVE-2019-14749 Public exploit

    An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the e…

  • Unscored —
    CVE-2019-14750 Public exploit Scanner template EPSS 11%

    An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It …

  • Unscored —
    CVE-2019-14745 Public exploit

    In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a craf…

    radare2 radare2 Ubuntu Alpine
  • Critical 9.8
    CVE-2019-1913 Public exploit EPSS 26%

    Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

    Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the unde…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • High 7.2
    CVE-2019-1914 Public exploit EPSS 25%

    Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. …

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • Critical 9.1
    CVE-2019-1912 Public exploit EPSS 17%

    Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management inte…

    Cisco Cisco Small Business 220 Series Smart Plus Switches Network devices
  • Unscored —
    CVE-2019-13143 Public exploit

    An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2…

  • Unscored —
    CVE-2019-14347 Public exploit

    Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an a…

  • Unscored —
    CVE-2019-14696 Public exploit Scanner template EPSS 16%

    Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.

  • Unscored —
    CVE-2019-14346 Public exploit

    Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.

  • Unscored —
    CVE-2019-14348 Public exploit EPSS 21%

    The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information vi…

  • Unscored —
    CVE-2019-14529 Public exploit EPSS 28%

    OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php.

  • High 7.2
    CVE-2019-0193 Exploited Public exploit Scanner template EPSS 84%

    XML External Entity (XXE) Injection in Apache Solr

    In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen…

    Apache Apache Solr org.apache.solr:solr-core lucene-solr Debian Ubuntu Maven
    KEV Dec 10, 2021