Skip to content
OpenAdvisories

Archive

5 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /5 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Critical 9.8
    CVE-2019-17206

    Uncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scripts

    Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) before 0.3.0 allows attackers to execute arbitrary scripts.

    rediswrapper PyPI
  • Medium 5.4
    CVE-2019-17203

    TeamPass Stored Cross-site Scripting

    TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder.

    nilsteampassnet/teampass Packagist
  • Medium 5.4
    CVE-2019-17204

    TeamPass Stored Cross-site Scripting

    TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item.

    nilsteampassnet/teampass Packagist
  • Medium 6.1
    CVE-2019-17205

    TeamPass Stored Cross-site Scripting

    TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed.

    nilsteampassnet/teampass Packagist
  • Unscored —
    CVE-2019-17199 Public exploit

    www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of…

  • Unscored —
    CVE-2019-17197

    OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinical_rules.php that…

  • Unscored —
    CVE-2019-17191

    The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, with…

  • Unscored —
    CVE-2019-17192

    The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing…