Skip to content
OpenAdvisories

Archive

August 2019

Vulnerabilities first published in this month (UTC), newest first.

← July 2019 2019 / August September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

2,007 results · Feed

  • Unscored —
    CVE-2019-13104

    In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amoun…

    u-boot u-boot Debian Ubuntu
  • Unscored —
    CVE-2019-6000

    Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and e…

    Canon EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ
  • Unscored —
    CVE-2019-6001

    Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and e…

    Canon EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ
  • Unscored —
    CVE-2019-5998

    Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and e…

    Canon EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ
  • Unscored —
    CVE-2019-5994

    Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and e…

    Canon EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ
  • Unscored —
    CVE-2019-5999

    Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and e…

    Canon EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ
  • Unscored —
    CVE-2019-5995

    Missing authorization vulnerability exists in EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, …

    Canon EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ
  • High 7.1
    CVE-2019-2386

    Authorization session conflation

    After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones. This issue affects MongoDB S…

    MongoDB MongoDB Server mongodb Ubuntu
  • Unscored —
    CVE-2019-14473

    eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks. Consequently, a valid gu…

  • Unscored —
    CVE-2019-13143 Public exploit

    An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2…

  • Unscored —
    CVE-2019-14347 Public exploit

    Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an a…

  • Medium 5.4
    CVE-2019-12950

    TeamPass Cross-site Scripting (XSS)

    An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload.

    nilsteampassnet/teampass Packagist
  • Unscored —
    CVE-2019-14696 Public exploit Scanner template EPSS 16%

    Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.

  • Unscored —
    CVE-2019-14697

    musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In …

    musl musl musl Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-14346 Public exploit

    Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.

  • Unscored —
    CVE-2019-14695

    A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploita…

  • Unscored —
    CVE-2016-10797

    cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC…

  • Unscored —
    CVE-2016-10796

    cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).

  • Unscored —
    CVE-2016-10795

    cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).

  • Unscored —
    CVE-2016-10794

    cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).

  • Unscored —
    CVE-2016-10793

    cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).

  • Unscored —
    CVE-2016-10792

    cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).

  • Unscored —
    CVE-2016-10791

    cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL…

  • Unscored —
    CVE-2016-10790

    cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).

  • Unscored —
    CVE-2016-10789

    cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).

  • Unscored —
    CVE-2016-10788

    cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188).

  • Unscored —
    CVE-2016-10787

    The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187).

  • Unscored —
    CVE-2016-10786

    cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).

  • Unscored —
    CVE-2016-10785

    cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185).

  • Unscored —
    CVE-2016-10784

    cPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184).

  • Unscored —
    CVE-2016-10783

    cPanel before 60.0.25 allows self stored XSS in SSL_listkeys (SEC-182).

  • Unscored —
    CVE-2016-10782

    cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs (SEC-181).

  • Unscored —
    CVE-2016-10781

    cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180).

  • Unscored —
    CVE-2016-10780

    cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180).

  • Unscored —
    CVE-2016-10779

    cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179).

  • Unscored —
    CVE-2016-10777

    cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).

  • Unscored —
    CVE-2016-10778

    cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178).

  • Unscored —
    CVE-2016-10776

    cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174).

  • Unscored —
    CVE-2019-14692

    AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.

    adplug adplug Debian Ubuntu
  • Unscored —
    CVE-2019-14691

    AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.

    adplug adplug Debian Ubuntu