Skip to content
OpenAdvisories

Archive

6 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /6 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2019-9854

    Unsafe URL assembly flaw in allowed script location check

    LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python …

    Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2019-16060

    Airbrake keys not being filtered

    The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected).

    airbrake-ruby RubyGems
  • Unscored —
    CVE-2019-16059

    Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrar…

  • Unscored —
    CVE-2019-16058

    An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a…

    pam-p11 pam-p11 Debian Ubuntu
  • Medium 5.3
    CVE-2019-16056

    An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The …

    python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2019-15890

    libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

    qemu virtualbox android qemu Debian Ubuntu
  • Unscored —
    CVE-2018-18630

    A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default instal…

  • Unscored —
    CVE-2019-15102

    An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. TestRunner_Non_distributed (and distributed end points) doe…

  • Unscored —
    CVE-2019-14223 Public exploit Scanner template

    An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share applica…

  • Unscored —
    CVE-2019-13953

    An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI…

  • Critical 9.8
    CVE-2019-13656

    An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11…

    CA Technologies Workload Automation AE Client Automation
  • Unscored —
    CVE-2018-6240

    NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value…

    Android
  • Unscored —
    CVE-2019-13517

    In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12,…

  • High 7.3
    CVE-2019-14813 EPSS 11%

    A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly s…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-15846 Public exploit EPSS 36%

    Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

    exim4 exim4 exim Debian Ubuntu Alpine