Skip to content
OpenAdvisories

Archive

18 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /18 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2019-12422 Public exploit

    Improper input validation in Apache Shiro

    Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.

    Apache Shiro shiro shiro Debian Ubuntu Maven
  • High 7.4
    CVE-2019-10764

    Timing attacks might allow practical recovery of the long-term private key

    In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication…

    simplito/elliptic-php Packagist
  • High 8.8
    CVE-2012-4438

    Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access

    Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven