Skip to content
OpenAdvisories

Archive

8 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /8 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

78 results · Feed

  • Unscored —
    CVE-2019-16416

    HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.

  • Unscored —
    CVE-2019-14657

    Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, bu…

  • Unscored —
    CVE-2019-14656

    Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User acc…

  • Unscored —
    RUSTSEC-2019-0024

    Test advisory with associated example crate

    This is a test advisory useful for verifying RustSec tooling and vulnerability detection pipelines are working correctly. Aside from the fact that it is filed against an example crate, it is otherwise considered by the Advisory Database itself to be a normal …

    rustsec-example-crate crates.io
  • Unscored —
    CVE-2019-17258

    IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x00000000…

  • Unscored —
    CVE-2019-17257

    IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80.

  • Unscored —
    CVE-2019-17256

    IrfanView 4.53 allows a User Mode Write AV starting at DPX!ReadDPX_W+0x0000000000001203.

  • Unscored —
    CVE-2019-17255

    IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836.

  • Unscored —
    CVE-2019-17254

    IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at FORMATS!Read_BadPN…

  • Unscored —
    CVE-2019-17253

    IrfanView 4.53 allows a User Mode Write AV starting at JPEG_LS+0x000000000000a6b8.

  • Unscored —
    CVE-2019-17252

    IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!Read_BadPNG+0x0000000000000115.

  • Unscored —
    CVE-2019-17251

    IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d43.

  • Unscored —
    CVE-2019-17250

    IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000042f5.

  • Unscored —
    CVE-2019-17249

    IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d57b.

  • Unscored —
    CVE-2019-17248

    IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000025b6.

  • Unscored —
    CVE-2019-17247

    IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x00000000…

  • Unscored —
    CVE-2019-17246

    IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000258c.

  • Unscored —
    CVE-2019-17245

    IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x0000000000004359.

  • Unscored —
    CVE-2019-17244

    IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS+0x0000000000001d8a.

  • Unscored —
    CVE-2019-17243

    IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS+0x0000000000003155.

  • Unscored —
    CVE-2019-17242

    IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000966f.

  • Unscored —
    CVE-2019-17241

    IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d563.

  • Unscored —
    CVE-2019-17262

    XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.

  • Unscored —
    CVE-2019-17261

    XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.

  • Unscored —
    CVE-2019-17260

    MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpc_hc!memcpy+0x000000000000004e.

  • Unscored —
    CVE-2019-17259

    KMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!src_new+0x000000000014d6ee.

  • Unscored —
    CVE-2019-17340

    An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileg…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-17341

    An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privi…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-17342

    An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privi…

    xen xen Debian Ubuntu
  • Unscored —
    CVE-2019-17343

    An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privi…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-17344

    An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging…

    xen xen Debian Ubuntu
  • Unscored —
    CVE-2019-17345

    An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-17346

    An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privi…

    xen xen Debian Alpine
  • Unscored —
    CVE-2019-17347

    An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privi…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-17348

    An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an…

    xen xen Debian Alpine
  • Unscored —
    CVE-2019-17349

    An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) …

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-17350

    An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) …

    xen xen Debian Ubuntu
  • Unscored —
    CVE-2019-17351

    An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allow…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu