Skip to content
OpenAdvisories

Archive

1 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /1 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

32 results · Feed

  • Medium 6.5
    CVE-2019-6470

    dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

    There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevente…

    Multiple, non-ISC dhcpd bind isc-dhcp Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2005-2352

    I race condition in Temp files was found in gs-gpl before 8.56 addons scripts.

    gs-gpl gs-gpl
  • Unscored —
    CVE-2013-4168

    Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.

    smokeping smokeping smokeping Debian
  • Unscored —
    CVE-2005-2351

    Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary f…

    mutt mutt mutt Debian
  • Unscored —
    CVE-2013-0186

    Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web scr…

    Red Hat ManageIQ EVM ManageIQ EVM Red Hat CloudForms 3.0
  • Medium 5.9
    CVE-2013-2255

    OpenStack Keystone and other components vulnerable to Improper Certificate Validation

    HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.

    OpenStack Keystone Compute keystone Debian PyPI
  • Unscored —
    CVE-2019-18654

    A Cross Site Scripting (XSS) issue exists in AVG AntiVirus (Internet Security Edition) 19.3.3084 build 19.3.4241.440 in…

  • Unscored —
    CVE-2013-0180

    Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.

    Redis Redis redis Debian
  • Unscored —
    CVE-2013-0178

    Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.

    Redis Redis redis Debian
  • Unscored —
    CVE-2019-18653

    A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 …

  • Unscored —
    CVE-2013-0165

    cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp.

    OpenShift mongodb cartridge OpenShift mongodb cartridge
  • Unscored —
    CVE-2005-2350

    Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HT…

    websieve websieve
  • Medium 6.1
    CVE-2010-3661

    TYPO3 Open Redirection vulnerability on the backend

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend.

    typo3/cms-backend Packagist
  • Unscored —
    CVE-2013-4367

    ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel …

    ovirt-engine ovirt-engine
  • Medium 5.4
    CVE-2010-3660

    TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend.

    typo3/cms-backend Packagist
  • Unscored —
    CVE-2013-2227 Public exploit EPSS 13%

    GLPI 0.83.7 has Local File Inclusion in common.tabs.php.

    INDEPNET Development Team GLPI
  • Unscored —
    CVE-2013-1666

    Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.

  • Unscored —
    CVE-2019-12752

    The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which cou…

    Symantec SONAR Component
  • Unscored —
    CVE-2019-6658

    On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a vulnerability in the AFM configuratio…

    F5 BIG-IP (AFM) Network devices
  • Unscored —
    CVE-2019-6657

    On BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting (XSS) vulnerability exi…

    F5 BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Network devices Browsers
  • Unscored —
    CVE-2019-15588 Public exploit

    There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an atta…

  • Unscored —
    CVE-2012-2979

    FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of s…

    nsd3 nsd3
  • Critical 9.8
    CVE-2011-3923 Public exploit EPSS 89%

    Struts ParameterInterceptor vulnerability allows remote command execution

    Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

    Apache Struts org.apache.struts:struts2-core Maven
  • Unscored —
    CVE-2005-3056

    TWiki allows arbitrary shell command execution via the Include function

  • High 8.1
    CVE-2013-4751

    Symfony collectionCascaded and collectionCascadedDeeply fields security bypass

    php-symfony2-Validator has loss of information during serialization

    symfony/symfony symfony/validator Packagist
  • Unscored —
    CVE-2013-3718

    evince is missing a check on number of pages which can lead to a segmentation fault

    evince Debian
  • Unscored —
    CVE-2013-2739 Public exploit

    MiniDLNA has heap-based buffer overflow

    minidlna Debian
  • Unscored —
    CVE-2013-2738

    minidlna has SQL Injection that may allow retrieval of arbitrary files

    minidlna Debian
  • Unscored —
    CVE-2013-2600

    MiniUPnPd has information disclosure use of snprintf()

    miniupnpd Debian
  • Unscored —
    CVE-2019-18636

    A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to in…

  • Unscored —
    CVE-2019-16909

    An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira. It is possible…

  • Unscored —
    CVE-2019-16908

    An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira. It is possible…