Skip to content
OpenAdvisories

Archive

18 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /18 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.1
    CVE-2012-4441

    Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)

    Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.

    Jenkins Project Jenkins org.jenkins-ci.plugins:ci-game Web / CMS Maven
  • Medium 6.1
    CVE-2012-4440

    Jenkins Violation Plugin allows Cross-Site Scripting (XSS)

    Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.

    Jenkins Project Jenkins org.jenkins-ci.plugins:violations Web / CMS Maven
  • Medium 6.1
    CVE-2012-4439

    Jenkins allows Cross-Site Scripting (XSS) via Crafted URL

    Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that points to Jenkins.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 6.1
    CVE-2019-10070 Public exploit

    Stored XSS in Apache Atlas

    Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality

    Apache Atlas org.apache.atlas:apache-atlas Maven
  • Medium 6.5
    CVE-2019-10763

    Data leakage via SQL Injection in Pimcore

    pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection. An attacker with limited privileges (classes permission) can achieve a SQL injection that can lead in data leakage. The vulnerability can be exploited via 'id', 'storeId', 'pageSize' and 'tables' pa…

    pimcore/pimcore Packagist
  • Medium 4.0
    CVE-2019-5102

    An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.…

    openwrt openwrt
  • Medium 4.0
    CVE-2019-5101

    An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.…

    openwrt openwrt
  • Medium 5.9
    CVE-2019-10172 Public exploit EPSS 17%

    Improper Restriction of XML External Entity Reference in jackson-mapper-asl

    A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

    Red Hat jackson-mapper-asl tez spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven