Skip to content
OpenAdvisories

Archive

8 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /8 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.3
    CVE-2019-14846

    Ansible Uses Plugins That Disclose Credentials

    In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. …

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2019-17359

    Out-of-Memory Error in Bouncy Castle Crypto

    The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.

    org.bouncycastle:bcprov-jdk14 Maven
  • High 7.5
    CVE-2019-17104

    Centreon Does Not Set HTTPOnly Flag

    In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.

    centreon/centreon Packagist
  • High 7.5
    CVE-2019-17352

    JFinal file validation vulnerability

    In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload any type of file. For example, a .jsp file may be stored and almost immediately deleted, but this deletion step does not…

    com.jfinal:jfinal Maven
  • High 7.5
    CVE-2019-16929

    Improper Authentication in Auth0.AuthenticationApi

    Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.

    Auth0.AuthenticationApi NuGet