Skip to content
OpenAdvisories

Archive

28 October 2019

Vulnerabilities first published on this day (UTC), newest first.

56 results · Feed

  • Unscored —

    pixelpost 1.7.1 has XSS

  • Unscored —

    pixelpost 1.7.1 has SQL injection

  • Unscored —

    mailscanner can allow local users to prevent virus signatures from being updated

  • Unscored —

    An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation.

  • Unscored —

    Zoo 2.10 has Directory traversal

  • Unscored —

    Snoopy before 2.0.0 has a security hole in exec cURL

  • Medium 5.5

    Podman Symlink Vulnerability

    An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing parti…

  • Unscored —

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —
    CVE-2019-14928 EPSS 43%

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —
    CVE-2019-14927 Public exploit EPSS 41%

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —
    CVE-2019-14931 Public exploit EPSS 57%

    An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …

  • Unscored —
    CVE-2019-16663 Public exploit EPSS 85%

    An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to …

  • Unscored —
    CVE-2019-16662 Public exploit Scanner template EPSS 98%

    An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to …