Archive

21 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /21 November 2019 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2019-17400

Server-Side Request Forgery in unoconv

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.

unoconv unoconv unoconv Debian Ubuntu PyPI

Oct 21, 2019
High 7.2

CVE-2019-16530

Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution.

org.sonatype.nexus:nexus-repository Maven

Oct 21, 2019