Skip to content
OpenAdvisories

Archive

6 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /6 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2019-17269

    Intellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the P…

  • Critical 9.8
    CVE-2019-17267

    Improper Input Validation in jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • Unscored —
    CVE-2019-17266

    libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in sou…

    libsoup2.4 libsoup2.4 libsoup Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-17264

    In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-bas…

    liblnk Debian
  • Unscored —
    CVE-2019-17263

    In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a hea…

    liblnk libfwsi Debian
  • Low 3.7
    CVE-2019-17240 Public exploit EPSS 41%

    bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using man…

  • Unscored —
    CVE-2019-17226

    CMS Made Simple (CMSMS) 2.2.11 allows XSS via the Site Admin > Module Manager > Search Term field.

  • Unscored —
    CVE-2019-17225 Public exploit

    Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" …

  • Unscored —
    CVE-2019-17215

    An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no brutefor…

  • Unscored —
    CVE-2019-17216

    An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. Password authenticat…

  • Unscored —
    CVE-2019-17217

    An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no CSRF pro…

  • Unscored —
    CVE-2019-17218

    An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the comm…

  • Unscored —
    CVE-2019-17219

    An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the devi…

  • Unscored —
    CVE-2019-17213

    The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header.

  • Unscored —
    CVE-2019-17214

    The WebARX plugin 1.3.0 for WordPress allows firewall bypass by appending &cc=1 to a URI.