Skip to content
OpenAdvisories

Archive

7 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /7 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2019-18835

    Improper Verification of Cryptographic Signature in matrix-synapse

    Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers.

    matrix-synapse matrix-synapse Ubuntu PyPI
  • High 8.8
    CVE-2019-3465

    Signature validation bypass in XmlSecLibs

    Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating…

    simplesamlphp simplesamlphp robrichards/xmlseclibs Debian Ubuntu Packagist
  • High 8.8
    CVE-2019-12331

    XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue

    PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than UTF-8 is declared in the header. This was a security measurement to prevent CVE-2018-19277 but the fix is not sufficien…

    phpoffice/phpspreadsheet phpoffice/phpexcel Packagist