Skip to content
OpenAdvisories

Archive

September 2019

Vulnerabilities first published in this month (UTC), newest first.

← August 2019 2019 / September October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

89 results · Clear filters · Feed

  • High 8.8
    CVE-2019-5069

    A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe…

  • High 8.8
    CVE-2019-15949 Exploited Public exploit EPSS 77%

    Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2019-1939

    Cisco Webex Teams Logging Feature Command Execution Vulnerability

    A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the applic…

    Cisco Cisco Webex Teams Network devices
  • High 7.5
    CVE-2019-1976

    Cisco Industrial Network Director Configuration Data Information Disclosure Vulnerability

    A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access…

    Cisco Cisco Industrial Network Director Network devices
  • High 8.7
    CVE-2019-13209

    Rancher Vulnerable to Cross-site Request Forgery (CSRF)

    Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hos…

    github.com/rancher/rancher Go
  • High 7.5
    CVE-2019-5479

    Unintended Require in larvitbase-api

    An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).

    larvitbase-api npm
  • High 8.8
    CVE-2019-5475 Public exploit EPSS 18%

    OS Command Injection in Nexus Yum Repository Plugin

    The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

    org.sonatype.nexus.plugins:nexus-yum-repository-plugin Maven
  • High 7.3
    CVE-2019-14817

    A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not pro…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  • High 7.3
    CVE-2019-14811 Public exploit

    A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not proper…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine