Skip to content
OpenAdvisories

Archive

19 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /19 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2019-9720

    A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted…

    qtwebengine-opensource-src gst-libav1.0 Ubuntu
  • Unscored —
    CVE-2019-9719

    A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted…

  • Unscored —
    CVE-2019-9717

    In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in …

    qtwebengine-opensource-src gst-libav1.0 Ubuntu
  • Unscored —
    CVE-2019-16525 Scanner template

    An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly fil…

  • High 7.5
    CVE-2019-14821

    An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hy…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2019-15033

    Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet addres…

  • Unscored —
    CVE-2019-15032

    Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is…

  • Unscored —
    CVE-2019-16511

    An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Mic…

  • Unscored —
    CVE-2019-16510

    libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrat…

  • Unscored —
    CVE-2019-16412

    In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. (Pr…

  • Unscored —
    CVE-2019-16398

    On Keeper K5 20.1.0.25 and 20.1.0.63 devices, remote code execution can occur by inserting an SD card containing a file…

  • Unscored —
    CVE-2019-15001 EPSS 11%

    The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 be…

    Atlassian Jira Server Jira Data Center Web / CMS
  • Unscored —
    CVE-2019-15000

    The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed version for 5.16.x ), from …

    Atlassian Bitbucket Server Bitbucket Data Center
  • Unscored —
    CVE-2019-14994

    The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.…

    Atlassian Jira Service Desk Server Jira Service Desk Data Center Web / CMS
  • Unscored —
    CVE-2019-6010

    Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to caus…

    LINE LINE(Android) Android
  • Unscored —
    CVE-2019-11779

    In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic t…

    The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Alpine
  • Medium 5.1
    CVE-2019-3689

    nfs-utils: root-owned files stored in insecure /var/lib/nfs directory

    The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains …

    SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 nfs-utils Linux Debian Ubuntu
  • Unscored —
    CVE-2019-15943 Public exploit

    vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or d…