Skip to content
OpenAdvisories

Archive

30 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /30 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2019-12417

    Apache Airflow vulnerable to XSS and local file disclosure

    A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.

    apache-airflow airflow PyPI
  • Medium 5.9
    CVE-2018-5742

    An oversight while backporting a feature leads to an assertion failure in buffer.c:420

    While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distribu…

    Red Hat BIND9
  • Medium 5.3
    CVE-2019-7619

    Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

    Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.

    Elastic Elasticsearch org.elasticsearch:elasticsearch Maven