Skip to content
OpenAdvisories

Archive

12 September 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8

    An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a c…

  • High 8.1

    Web Gateway (MWG) - Reflected Cross Site Scripting vulnerability

    Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking t…

  • High 8.8
    CVE-2019-10392 Public exploit EPSS 23%

    Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin

    Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.