Skip to content
OpenAdvisories

Archive

3 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /3 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2019-5475 Public exploit EPSS 18%

    OS Command Injection in Nexus Yum Repository Plugin

    The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

    org.sonatype.nexus.plugins:nexus-yum-repository-plugin Maven
  • Medium 5.6
    CVE-2019-1125 Public exploit

    Windows Kernel Information Disclosure Vulnerability

    An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Debian Ubuntu
  • Medium 6.1
    CVE-2019-15889 Public exploit Scanner template EPSS 11%

    The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by …

  • High 7.3
    CVE-2019-14811 Public exploit

    A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not proper…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-15043 Public exploit Scanner template EPSS 63%

    In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run…

    grafana grafana Ubuntu Alpine
  • Unscored —
    CVE-2019-15858 Public exploit Scanner template EPSS 20%

    admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthentic…