Skip to content
OpenAdvisories

Archive

14 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /14 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-18978

    The rack-cors rubygem may allow directory traveral

    An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

    rack-cors ruby-rack-cors ruby-rack-cors Debian Ubuntu RubyGems
  • Medium 6.5
    CVE-2019-11135

    TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potent…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2012-1159

    Moodle included private user files in course backups

    Moodle before 2.2.2: Overview report allows users to see hidden courses

    Moodle moodle moodle/moodle Web / CMS Packagist
  • Medium 4.3
    CVE-2012-1157

    Moodle default permissions too permissive

    Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

    Moodle moodle moodle/moodle Web / CMS Packagist
  • Medium 4.3
    CVE-2019-8244

    Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could l…

    Adobe Adobe Media Encoder
  • Medium 4.3
    CVE-2019-8243

    Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could l…

    Adobe Adobe Media Encoder
  • Medium 4.3
    CVE-2019-8242

    Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could l…

    Adobe Adobe Media Encoder
  • Medium 4.3
    CVE-2019-8241

    Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could l…

    Adobe Adobe Media Encoder
  • Medium 4.8
    CVE-2019-3640

    Data Loss Prevention - Unprotected Transport of Credentials

    Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when t…

    McAfee Data Loss Prevention