Skip to content
OpenAdvisories

Archive

13 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /13 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-3663 Public exploit

    Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability

    Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of Hi…

    McAfee Advanced Threat Defense (ATD)
  • Unscored —
    CVE-2019-18951 Public exploit EPSS 20%

    SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.

  • Critical 9.8
    CVE-2019-5029 Public exploit EPSS 57%

    An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.…

  • Unscored —
    CVE-2014-1214 Public exploit

    views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote atta…

  • Unscored —
    CVE-2012-5193 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2012-2237 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote at…

    Mahara Mahara
  • Unscored —
    CVE-2019-2198 Public exploit

    In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure …

    Android
  • Unscored —
    CVE-2019-2196 Public exploit

    In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no addition…

    Android
  • Unscored —
    CVE-2019-2205 Public exploit

    In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free…

    Android
  • Unscored —
    CVE-2012-4385 Public exploit

    letodms 3.3.6 has CSRF via change password

    letodms letodms
  • Unscored —
    CVE-2012-4384 Public exploit

    letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Cal…

    letodms letodms