Skip to content
OpenAdvisories

Archive

September 2019

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-16920 Exploited Public exploit Scanner template EPSS 100%

    Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The …

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-16759 Exploited Public exploit Scanner template EPSS 100%

    vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widg…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-14540 Public exploit EPSS 11%

    Polymorphic Typing issue in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

  • Critical 10.0
    CVE-2019-5485 Public exploit EPSS 59%

    Command Injection in gitlabhook

    NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.

  • Critical 9.9
    CVE-2019-15954 Public exploit EPSS 79%

    Total.js CMS RCE Vulnerability

    An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be eva…