Skip to content
OpenAdvisories

Archive

4 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /4 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

43 results · Feed

  • Unscored —
    CVE-2010-3669

    TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login bo…

  • Unscored —
    CVE-2010-3668

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secu…

  • Medium 5.3
    CVE-2010-3667

    TYPO3 is vulnerable to Spam Abuse in the native form content element

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.

    typo3/cms-frontend Packagist
  • Medium 5.3
    CVE-2010-3666

    TYPO3 is vulnerable to Insecure randomness in uniqid function

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness in the uniqid function.

    typo3/cms-install Packagist
  • Unscored —
    CVE-2010-3665

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the Extension Manager.

  • Medium 6.5
    CVE-2010-3664

    TYPO3 is vulnerable to Information Disclosure on the backend

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Information Disclosure on the backend.

    typo3/cms-backend Packagist
  • High 8.8
    CVE-2010-3663

    TYPO3 Arbitrary Code Execution vulnerability on the backend

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.

    typo3/cms-backend Packagist
  • Unscored —
    CVE-2013-4374

    An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped…

    RHQ Mongo DB Drift Server RHQ Mongo DB Drift Server
  • High 8.8
    CVE-2010-3662

    TYPO3 SQL injection vulnerability on the backend

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows SQL Injection on the backend.

    typo3/cms-backend Packagist
  • Critical 9.8
    CVE-2013-4409

    ReviewBoard and Djblets library are vulnerable to code execution

    An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

    Python Software Foundation; Beanbag Review Board Djblets djblets PyPI
  • Unscored —
    CVE-2015-8980

    The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arb…

    phpmyadmin php-gettext php-gettext Debian Ubuntu
  • Unscored —
    CVE-2017-5332

    The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, w…

    Debian icoutils icoutils icoutils Debian Ubuntu
  • Unscored —
    CVE-2017-5331

    Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to …

    Debian icoutils icoutils icoutils Debian Ubuntu
  • Unscored —
    CVE-2017-5333

    Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 a…

    Debian icoutils icoutils icoutils Debian Ubuntu
  • Unscored —
    CVE-2019-17210

    A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString(…

  • Unscored —
    CVE-2019-18178

    Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The fil…

  • High 7.8
    CVE-2013-4251

    SciPy creates insecure temporary directories

    The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

    SciPy SciPy scipy PyPI
  • Unscored —
    CVE-2019-18663

    A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attac…

  • Unscored —
    CVE-2013-4280

    Insecure temporary file vulnerability in RedHat vsdm 4.9.6.

    Red Hat vdsm
  • Unscored —
    CVE-2005-4890

    There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The …

    Red Hat shadow sudo sudo Debian
  • Unscored —
    CVE-2019-13497 Public exploit

    One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.

  • Unscored —
    CVE-2019-13496 Public exploit

    One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, th…

  • Unscored —
    CVE-2013-2257

    Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness

    Cryptocat Cryptocat
  • Unscored —
    CVE-2013-2258

    Cryptocat before 2.0.22 has Nickname User Impersonation

    Cryptocat Cryptocat
  • Unscored —
    CVE-2013-2259

    Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

    Cryptocat Cryptocat
  • Unscored —
    CVE-2013-4105

    Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure

    Cryptocat Cryptocat
  • Unscored —
    CVE-2013-2260

    Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness

    Cryptocat Cryptocat
  • Unscored —
    CVE-2019-18684

    Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo p…

  • Unscored —
    CVE-2013-2262

    Cryptocat strophe.js before 2.0.22 has information disclosure

    Cryptocat Cryptocat
  • Unscored —
    CVE-2013-2261 Public exploit EPSS 12%

    Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure

  • Unscored —
    CVE-2013-4104

    Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol

  • Unscored —
    CVE-2019-18683 Public exploit

    An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privil…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2013-4100

    Cryptocat before 2.0.22 has Remote Denial of Service via username

  • Unscored —
    CVE-2013-4101

    Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness

  • Unscored —
    CVE-2013-4102

    Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness

  • Unscored —
    CVE-2018-19031

    A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the…

    360 Security Technology 360 Safe Router
  • Unscored —
    CVE-2013-4103 Public exploit

    Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

  • Unscored —
    CVE-2019-0350

    SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which cra…

    SAP SAP HANA database
  • Unscored —
    CVE-2019-18680

    An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_s…

    linux-raspi2 linux-riscv linux-gke linux-hwe-edge Ubuntu
  • Unscored —
    CVE-2014-3649

    JBoss AeroGear has reflected XSS via the password field

    jboss AeroGear