Skip to content
OpenAdvisories

Archive

18 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /18 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2019-18198

    In the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress() function in the fib6 suppre…

    linux-raspi2 linux-riscv linux-gke linux-azure-fde Ubuntu
  • High 7.5
    CVE-2019-18197

    Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability

    In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written …

    nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems
  • Unscored —
    CVE-2019-4409

    HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of th…

    HCL Software HCL Traveler
  • Unscored —
    CVE-2019-13541

    In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be …

  • Unscored —
    CVE-2019-13545

    In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the inten…

  • Unscored —
    CVE-2019-17367

    OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall…

  • Unscored —
    CVE-2019-17526

    An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Injection can occur in the context…

  • Unscored —
    CVE-2019-17393

    The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can…

  • Unscored —
    CVE-2019-17207

    A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link…

  • Unscored —
    CVE-2019-15901

    An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call w…

  • Unscored —
    CVE-2019-15900

    An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strto…

  • Unscored —
    CVE-2019-16919

    Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor…

  • High 7.5
    CVE-2019-17513 Public exploit

    io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')

    An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Resp…

    io.ratpack:ratpack-core Maven