Archive

12 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /12 December 2019 →

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

High 7.3

CVE-2019-17332

TIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities

The Digital Asset Manager Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.…

TIBCO Software TIBCO EBX Add-ons

Nov 12, 2019
High 7.3

CVE-2019-17331

TIBCO EBX Add-on For Data Exchange Cross-Site Scripting Vulnerabilities

The Data Exchange Web Interface component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO…

TIBCO Software TIBCO EBX Add-ons

Nov 12, 2019
High 8.8

CVE-2019-17330

TIBCO EBX Exposes Multiple Cross-Site Scripting Vulnerabilities

The Web server component of TIBCO Software Inc.'s TIBCO EBX contains multiple vulnerabilities that theoretically allow authenticated users to perform stored cross-site scripting (XSS) attacks, and unauthenticated users to perform reflected cross-site scriptin…

TIBCO Software TIBCO EBX

Nov 12, 2019
High 7.5

CVE-2019-1429 Exploited Public exploit EPSS 77%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 Windows

Nov 12, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-1405 Exploited · Ransomware Public exploit EPSS 30%

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allow…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Nov 12, 2019
KEV Mar 15, 2022
High 7.8

CVE-2019-1385 Exploited · Ransomware

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privileg…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Nov 12, 2019
KEV May 23, 2022
High 7.8

CVE-2019-1388 Exploited · Ransomware Public exploit

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Nov 12, 2019
KEV Apr 7, 2023
High 7.5

CVE-2019-18848

JSON-jwt Gem lacked element count during splitting of JWE string

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.

json-jwt ruby-json-jwt ruby-json-jwt Debian Ubuntu RubyGems

Nov 12, 2019
High 7.5

CVE-2019-18817

Istio vulnerable to denial of service

Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-18836.

istio.io/istio Go

Nov 12, 2019
High 7.5

CVE-2014-7143

Python Twisted trustRoot is not respected in HTTP client

Python Twisted 14.0 trustRoot is not respected in HTTP client

twisted twisted Debian PyPI

Nov 12, 2019
High 7.5

CVE-2019-18874

Double Free in psutil

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

python-psutil psutil python-psutil py-psutil Debian Ubuntu Azure Linux Alpine PyPI

Nov 12, 2019