Skip to content
OpenAdvisories

Archive

21 November 2019

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2012-1001 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers …

  • Unscored —
    CVE-2014-8356 Public exploit

    The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended …

  • Unscored —
    CVE-2015-3140 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, S…

  • Unscored —
    CVE-2019-19203 Public exploit

    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UCh…

  • Unscored —
    CVE-2019-19204 Public exploit

    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as…

  • Unscored —
    CVE-2013-3314 Public exploit

    The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2…

  • Unscored —
    CVE-2019-16758 Public exploit EPSS 17%

    In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal tec…

  • Unscored —
    CVE-2019-19033 Public exploit

    Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges …

  • Unscored —
    CVE-2019-15511 Public exploit

    An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due …

  • Unscored —
    CVE-2019-18890 Public exploit

    A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected…

  • High 7.2
    CVE-2019-16405 Public exploit EPSS 27%

    Improper Input Validation in Centreon Web

    Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one anot…

  • Medium 6.5
    CVE-2019-6693 Exploited · Ransomware Public exploit

    Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attack…

    KEV Jun 25, 2025