Skip to content
OpenAdvisories

Archive

11 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /11 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-18857

    XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes

    darylldoyle svg-sanitizer before 0.12.0 mishandles script and data values in attributes, as demonstrated by unexpected whitespace such as in the javascript	:alert substring.

    enshrined/svg-sanitize Packagist
  • High 7.3
    CVE-2019-18841

    Prototype Pollution in chartkick

    Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.

    chartkick chartkick npm RubyGems