Skip to content
OpenAdvisories

Archive

28 October 2019

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • High 7.5
    CVE-2019-0205 Public exploit

    Loop with Unreachable Exit Condition in Apache Thrift

    In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects o…

  • Medium 5.5
    CVE-2019-10743 Public exploit

    Path Traversal in MHolt Archiver

    All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated t…

  • Unscored —
    CVE-2019-3978 Public exploit EPSS 10%

    RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS quer…

  • Unscored —
    CVE-2019-14450 Public exploit EPSS 10%

    A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allow…

  • Unscored —
    CVE-2019-17181 Public exploit EPSS 48%

    A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET …

  • High 8.7
    CVE-2019-11043 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Underflow in PHP-FPM can lead to RCE

    In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibilit…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2019-14927 Public exploit EPSS 41%

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —
    CVE-2019-14931 Public exploit EPSS 57%

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —
    CVE-2019-16663 Public exploit EPSS 85%

    An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to …

  • Unscored —
    CVE-2019-16662 Public exploit Scanner template EPSS 98%

    An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to …