Skip to content
OpenAdvisories

Archive

18 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /18 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2019-12422 Public exploit

    Improper input validation in Apache Shiro

    Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.

    Apache Shiro shiro shiro Debian Ubuntu Maven
  • Critical 9.8
    CVE-2019-12409 Public exploit EPSS 22%

    Unrestricted upload of file with dangerous type in Apache Solr

    The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, the…

    Apache Solr org.apache.solr:solr-core Maven
  • Medium 6.1
    CVE-2019-10070 Public exploit

    Stored XSS in Apache Atlas

    Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality

    Apache Atlas org.apache.atlas:apache-atlas Maven
  • Unscored —
    CVE-2019-5688 Public exploit

    NVIDIA NVFlash, NVUFlash Tool prior to v5.588.0 and GPUModeSwitch Tool prior to 2019-11, NVIDIA kernel mode driver (nvf…

    NVIDIA NVIDIA NVFlash, NVUFlash, GPUModeSwitch Tool
  • Unscored —
    CVE-2011-5331 Public exploit

    Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval.

  • Medium 5.9
    CVE-2019-10172 Public exploit EPSS 17%

    Improper Restriction of XML External Entity Reference in jackson-mapper-asl

    A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

    Red Hat jackson-mapper-asl tez spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven
  • Unscored —
    CVE-2018-13257 Public exploit

    The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header sp…