Skip to content
OpenAdvisories

Archive

24 October 2019

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 5.4

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

  • Medium 4.0

    IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a …

  • Medium 5.4

    IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable …

  • Medium 5.3

    IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 stores sensiti…

  • Medium 5.3
    CVE-2019-18393 Scanner template EPSS 14%

    Ignite Realtime Openfire directory traversal vulnerability

    PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.