Skip to content
OpenAdvisories

Archive

28 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /28 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2019-0205 Public exploit

    Loop with Unreachable Exit Condition in Apache Thrift

    In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects o…

    Apache Apache Thrift druid trino Debian Azure Linux Wolfi Maven
  • High 7.5
    CVE-2019-0210

    Out-of-bounds read in Apache Thrift

    In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

    Apache Apache Thrift thrift github.com/apache/thrift Debian Go
  • High 7.5
    CVE-2012-2945

    Hadoop symlink vulnerability

    Hadoop 1.0.3 contains a symlink vulnerability.

    org.apache.hadoop:hadoop-main Maven
  • High 8.8
    CVE-2019-18187 Exploited EPSS 25%

    Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vu…

    Trend Micro Trend Micro OfficeScan
    KEV Nov 3, 2021
  • High 7.5
    CVE-2012-5577

    Incorrect Default Permissions in keyring

    Python keyring lib before 0.10 created keyring files with world-readable permissions.

    Python keyring lib Python keyring lib keyring python-keyring Debian PyPI
  • High 7.5
    CVE-2019-3636

    File masquerade attack vulnerability in McAfee Total Protection

    A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with po…

    McAfee, LCC McAfee Total Protection
  • High 8.7
    CVE-2019-11043 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Underflow in PHP-FPM can lead to RCE

    In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibilit…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
    KEV Mar 25, 2022