Skip to content
OpenAdvisories

Archive

24 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /24 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Unscored —
    CVE-2019-17596 Public exploit

    Panic on invalid DSA public keys in crypto/dsa

    Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

    golang go stdlib golang-1.8 Ubuntu Azure Linux Alpine Go
  • Unscored —
    CVE-2019-18418 Public exploit

    clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests b…

  • Critical 9.8
    CVE-2019-18394 Public exploit Scanner template EPSS 32%

    Ignite Realtime Openfire vulnerable to Server Side Request Forgery

    A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.

    org.igniterealtime.openfire:parent Maven