Archive

3 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /3 October 2019 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 7.5

CVE-2019-5479

Unintended Require in larvitbase-api

An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).

larvitbase-api npm

Sep 3, 2019
High 8.8

CVE-2019-5475 Public exploit EPSS 18%

OS Command Injection in Nexus Yum Repository Plugin

The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

org.sonatype.nexus.plugins:nexus-yum-repository-plugin Maven

Sep 3, 2019
High 7.3

CVE-2019-14817

A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not pro…

Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Sep 3, 2019
High 7.3

CVE-2019-14811 Public exploit

A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not proper…

Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Sep 3, 2019