Skip to content
OpenAdvisories

Archive

October 2019

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2019-5010 Public exploit EPSS 21%

    An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.…

  • Medium 5.5
    CVE-2019-10743 Public exploit

    Path Traversal in MHolt Archiver

    All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated t…

  • Medium 6.1
    CVE-2019-10475 Public exploit Scanner template EPSS 58%

    Jenkins build-metrics Plugin reflected cross-site scripting vulnerability

    A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.

  • Medium 5.9
    CVE-2019-6467 Public exploit

    An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c

    A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the ser…