Skip to content
OpenAdvisories

Archive

13 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /13 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

111 results · Feed

  • Unscored —
    CVE-2019-2195

    In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input vali…

    Android
  • Unscored —
    CVE-2019-2193

    In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device…

    Android
  • Unscored —
    CVE-2019-2192

    In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead…

    Android
  • Unscored —
    CVE-2010-4532

    offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified whic…

    offlineimap offlineimap
  • Unscored —
    CVE-2019-16948

    An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at W…

  • Unscored —
    CVE-2019-5293

    Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation pri…

  • Unscored —
    CVE-2019-5294

    There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corr…

  • Unscored —
    CVE-2014-8167

    vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle a…

    vdsm and vdsclient vdsm and vdsclient
  • Unscored —
    CVE-2019-5289

    Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insuffic…

  • Unscored —
    CVE-2012-4385 Public exploit

    letodms 3.3.6 has CSRF via change password

    letodms letodms
  • Unscored —
    CVE-2013-4654

    Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..

  • Unscored —
    CVE-2019-5292

    Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9…

  • Unscored —
    CVE-2012-4384 Public exploit

    letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Cal…

    letodms letodms
  • Unscored —
    CVE-2019-18929

    Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute ar…

  • Unscored —
    CVE-2019-18930

    Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arb…

  • Medium 4.3
    CVE-2014-3655

    JBoss KeyCloak is vulnerable to soft token deletion via CSRF

    JBoss KeyCloak is vulnerable to soft token deletion via CSRF

    jboss KeyCloak org.keycloak:keycloak-services Maven
  • Unscored —
    CVE-2019-18931

    Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) c…

  • Unscored —
    CVE-2014-3592

    OpenShift Origin: Improperly validated team names could allow stored XSS attacks

    OpenShift Origin OpenShift Origin
  • Unscored —
    CVE-2013-4655

    Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.

  • Unscored —
    CVE-2019-15948

    Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote att…

  • Unscored —
    CVE-2019-5288

    P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability du…

  • Unscored —
    CVE-2013-4656

    Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service.

  • Unscored —
    CVE-2019-5287

    P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability du…

  • Unscored —
    CVE-2019-18839

    FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attac…

  • Unscored —
    CVE-2019-17523

    An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script vi…

  • Unscored —
    CVE-2019-17524

    An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script vi…

  • Unscored —
    CVE-2019-18397

    A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.…

    fribidi fribidi Debian Alpine
  • Unscored —
    CVE-2019-5282

    Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlie…

  • Unscored —
    CVE-2019-5279

    Huawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461…

  • Medium 4.5
    CVE-2019-3641

    Exploitation of Authorization in TIE Server

    Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

    McAfee Threat Intelligence Exchange Server (TIE Server)
  • Medium 6.1
    CVE-2019-3648

    Implicit loading of DLLs

    A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permiss…

    McAfee McAfee Total Protection