Skip to content
OpenAdvisories

Archive

16 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /16 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-5482 EPSS 18%

    Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

    curl curl curl gnurl Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2019-5481

    Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

    curl curl curl gnurl Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2019-10071

    Timing attack on HMAC signature comparison in Apache Tapestry

    The code which checks HMAC in form submissions used String.equals() for comparisons, which results in a timing side channel for the comparison of the HMAC signatures. This could lead to remote code execution if an attacker is able to determine the correct sig…

    Apache Apache Tapestry org.apache.tapestry:tapestry-core Maven
  • Critical 9.8
    CVE-2019-0195 EPSS 14%

    Deserialization of Untrusted Data in Apache Tapestry

    Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. If the attacker found the file with the value of the tapestry.hmac-passphrase configuration symbol, most probably the webapp's Ap…

    org.apache.tapestry:tapestry-core Maven
  • Critical 9.8
    CVE-2019-16057 Exploited · Ransomware Scanner template EPSS 86%

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

    KEV Apr 15, 2022