Archive

1 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /1 November 2019 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.5

CVE-2019-0231

Apache MINA SSLFilter security Issue

Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1…

Apache Software Foundation Apache MINA mina2 mina Debian Ubuntu Maven

Oct 1, 2019
High 8.1

CVE-2019-10202

Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl

A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackso…

Red Hat codehaus tez spark-4.0-scala-2.13 Wolfi Maven

Oct 1, 2019
High 7.5

CVE-2019-10435

Jenkins SourceGear Vault plugin transmits credentials in plain text

Jenkins SourceGear Vault Plugin transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

Jenkins Project Jenkins SourceGear Vault Plugin org.jenkins-ci.plugins:vault-scm-plugin Web / CMS Maven

Oct 1, 2019