Skip to content
OpenAdvisories

Archive

August 2019

Vulnerabilities first published in this month (UTC), newest first.

← July 2019 2019 / August September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

212 results · Clear filters · Feed

  • Medium 4.8
    CVE-2019-7863

    Magento Stored cross-site scripting in admin panel

    A stored cross-site scripting vulnerability exists in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to products and categories.

    magento/community-edition Web / CMS Packagist
  • Medium 4.8
    CVE-2019-7862

    Magento 2 Community Edition XSS Vulnerability

    A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.

    magento/community-edition Web / CMS Packagist
  • Medium 4.3
    CVE-2019-7857

    Magento Cross-Site Request Forgery (CSRF)

    A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a shopper's cart due to an insufficiently robust anti-CSRF token implementation.

    magento/community-edition Web / CMS Packagist
  • Medium 5.3
    CVE-2019-7855

    Magento 2 Community Cryptographic Flaw

    A cryptograhic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could be abused by an unauthenticated user to discover an invariant used in gift card generation.

    magento/community-edition Web / CMS Packagist
  • Medium 5.3
    CVE-2019-7852

    Magento 2 Community Edition Path Disclosure

    A path disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Requests for a specific file path could result in a redirect to the URL of the Magento admin panel, disclosing its location to poten…

    magento/community-edition Web / CMS Packagist
  • Medium 6.5
    CVE-2019-7851

    Magento 2 Community Edition CSRF vulnerability

    A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.

    magento/community-edition Web / CMS Packagist
  • Medium 6.5
    CVE-2019-10093

    Allocation of Resources Without Limits or Throttling in Apache Tika

    In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.

    Apache Apache Tika tika org.apache.tika:tika-parsers Debian Maven
  • Medium 5.1
    CVE-2018-1987

    IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect no…

    IBM Spectrum Protect for Enterprise Resource Planning
  • Medium 6.2
    CVE-2019-4275

    IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique cat…

    IBM Jazz for Service Management
  • Medium 4.2
    CVE-2019-10176

    A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster…

    Red Hat atomic-openshift
  • Medium 6.1
    CVE-2019-14517

    Cross-site Scripting in pandao editor.md

    pandao Editor.md 1.5.0 allows XSS via the Javascript: string.

    editor.md npm
  • Medium 5.8
    CVE-2019-14495

    webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.