Skip to content
OpenAdvisories

Archive

15 September 2019

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Critical 9.8

    Polymorphic Typing issue in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.

  • Critical 9.8
    CVE-2019-14540 Public exploit EPSS 11%

    Polymorphic Typing issue in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

  • Unscored —

    GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php.

  • Unscored —

    In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -> Add New Category -> Name field. NOTE: th…

  • Unscored —
    CVE-2019-16332 Scanner template

    In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swag…

  • Unscored —

    Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, suc…

  • Unscored —

    ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr…

  • Unscored —

    In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was address…