Skip to content
OpenAdvisories

Archive

October 2019

Vulnerabilities first published in this month (UTC), newest first.

90 results · Clear filters · Feed

  • High 8.5
    CVE-2019-16328 Public exploit EPSS 13%

    Dynamic modification of RPyC service due to missing security check

    In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings.

  • Low 1.6
    CVE-2019-15166 Public exploit

    lmp_print in tcpdump lacks certain boundary checks

    lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.

  • Critical 9.8
    CVE-2018-14881 Public exploit

    The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_REST…

  • Unscored —
    CVE-2018-14880 Public exploit

    The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().

  • High 7.0
    CVE-2018-14879 Public exploit

    The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

  • Unscored —
    CVE-2018-14469 Public exploit

    The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().

  • Unscored —
    CVE-2019-16116 Public exploit

    EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file…

  • Unscored —
    CVE-2019-13025 Public exploit

    Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Valid…

  • Unscored —
    CVE-2019-17080 Public exploit

    mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by …

  • Unscored —
    CVE-2019-15039 Public exploit EPSS 13%

    An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed i…