Skip to content
OpenAdvisories

Archive

9 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /9 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-12405

    Improper Authentication in Apache Traffic Control

    Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as …

    Apache Traffic Control github.com/apache/trafficcontrol Go
  • Critical 9.1
    CVE-2019-10668

    Missing Authentication for Critical Function in LibreNMS

    An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and …

    librenms/librenms Packagist
  • Critical 9.8
    CVE-2019-10665

    LibreNMS Information Disclosure

    An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options (html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some par…

    librenms/librenms Packagist
  • Critical 9.8
    CVE-2019-16143

    Algorithms compute incorrect results in blake2

    An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes.

    blake2 crates.io
  • Critical 9.8
    CVE-2019-16142

    Improper Input Validation in renderdoc

    An issue was discovered in the renderdoc crate before 0.5.0 for Rust. Multiple exposed methods take self by immutable reference, which is incompatible with a multi-threaded application.

    renderdoc crates.io
  • Critical 9.8
    CVE-2019-16139

    Out of bounds access in compact_arena

    An issue was discovered in the compact_arena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read.

    compact_arena crates.io
  • Critical 9.8
    CVE-2019-16138

    Use after free in image

    An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution.

    image crates.io
  • Critical 9.8
    CVE-2019-16140

    Use-after-free in chttp

    An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion.

    chttp crates.io