Skip to content
OpenAdvisories

Archive

5 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /5 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

59 results · Feed

  • Unscored —
    CVE-2019-15942

    FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_r…

    ffmpeg ffmpeg4 Alpine
  • Unscored —
    CVE-2018-11569

    Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5…

  • Medium 5.9
    CVE-2019-15939

    Divide By Zero in OpenCV.

    An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.

    opencv-contrib-python opencv opencv-python opencv Debian Ubuntu PyPI
  • Unscored —
    CVE-2019-12223

    An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before…

  • Medium 5.3
    CVE-2019-4186

    IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Hos…

    IBM Jazz for Service Management
  • Medium 5.4
    CVE-2019-4149

    IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0…

    IBM Business Automation Workflow Business Process Manager
  • Medium 5.9
    CVE-2019-4321

    IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - …

    IBM Intelligent Operations Center
  • Unscored —
    CVE-2019-15937

    Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length …

  • Unscored —
    CVE-2019-15938

    Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length fie…

  • Unscored —
    CVE-2019-10677 Public exploit

    Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devi…

  • Unscored —
    CVE-2018-21010

    OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

    insighttoolkit4 qtwebengine-opensource-src openjpeg2 openjpeg2 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-21009

    Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.

    poppler poppler Debian Ubuntu
  • High 7.5
    CVE-2019-1939

    Cisco Webex Teams Logging Feature Command Execution Vulnerability

    A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the applic…

    Cisco Cisco Webex Teams Network devices
  • High 7.5
    CVE-2019-1976

    Cisco Industrial Network Director Configuration Data Information Disclosure Vulnerability

    A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access…

    Cisco Cisco Industrial Network Director Network devices
  • Medium 4.3
    CVE-2019-12635

    Cisco Content Security Management Appliance Information Disclosure Vulnerability

    A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not corre…

    Cisco Cisco Content Security Management Appliance (SMA) Network devices
  • Medium 6.1
    CVE-2019-12644

    Cisco Identity Services Engine Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an af…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.7
    CVE-2019-12645

    Cisco Jabber Client Framework for Mac Code Execution Vulnerability

    A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper fi…

    Cisco Cisco Jabber for Mac Network devices
  • Medium 5.3
    CVE-2019-12632

    Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability

    A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly va…

    Cisco Cisco Finesse Network devices
  • Medium 5.3
    CVE-2019-12633

    Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability

    A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper …

    Cisco Cisco Unified Contact Center Express Network devices