Skip to content
OpenAdvisories

Archive

11 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /11 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2019-18862 Public exploit

    maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode.

    mailutils mailutils Debian Ubuntu
  • Unscored —
    CVE-2019-18853

    ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly …

  • Unscored —
    CVE-2019-18854

    A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to …

  • Unscored —
    CVE-2019-18855

    A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to …

  • Unscored —
    CVE-2019-18856

    A Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x-1.0-alpha1 for Drupal because access t…

  • High 7.5
    CVE-2019-18857

    XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes

    darylldoyle svg-sanitizer before 0.12.0 mishandles script and data values in attributes, as demonstrated by unexpected whitespace such as in the javascript	:alert substring.

    enshrined/svg-sanitize Packagist
  • Unscored —
    CVE-2019-18852

    Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign…

  • Unscored —
    CVE-2019-18849

    In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message…

    tnef tnef Debian Ubuntu
  • Unscored —
    CVE-2019-18836

    Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connecti…

  • High 7.3
    CVE-2019-18841

    Prototype Pollution in chartkick

    Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.

    chartkick chartkick npm RubyGems