Skip to content
OpenAdvisories

Archive

August 2019

Vulnerabilities first published in this month (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.5
    CVE-2019-13608 Exploited · Ransomware EPSS 30%

    Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE a…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2019-15752 Exploited Public exploit EPSS 49%

    Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-15107 Exploited · Ransomware Public exploit EPSS 100%

    An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulner…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-0344 Exploited

    Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 18…

    KEV Sep 30, 2024
  • Critical 9.8
    CVE-2019-11581 Exploited Public exploit EPSS 85%

    There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators a…

    KEV Mar 7, 2022
  • High 7.2
    CVE-2019-0193 Exploited Public exploit EPSS 84%

    XML External Entity (XXE) Injection in Apache Solr

    In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen…

    KEV Dec 10, 2021