Skip to content
OpenAdvisories

Archive

22 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /22 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 4.5
    CVE-2019-11287 Public exploit

    RabbitMQ Web Management Plugin DoS via heap overflow

    Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack…

    Pivotal RabbitMQ RabbitMQ for Pivotal Platform rabbitmq-server Debian Ubuntu Hex
  • Medium 5.3
    CVE-2019-3654

    Client Proxy (MCP) - Authentication Bypass vulnerability

    Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key…

    McAfee Client Proxy (MCP)
  • Medium 4.8
    CVE-2019-16763

    XSS in Pannellum from 2.5.0 through 2.5.4

    In Pannellum from 2.5.0 through 2.5.4 URLs were not sanitized for data URIs (or vbscript:), allowing for potential XSS attacks. Such an attack would require a user to click on a hot spot to execute and would require an attacker-provided configuration. The mos…

    mpretroff pannellum pannellum npm
  • Medium 6.1
    CVE-2019-9536

    Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'.…

    Apple iPhone
  • Medium 5.1
    CVE-2019-4243

    IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xm…

    IBM SmartCloud Analytics
  • Medium 5.4
    CVE-2019-4569

    IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulnerable to cross-site scripting. This vulnerability allows use…

    IBM Tivoli Netcool Impact
  • Medium 4.6
    CVE-2019-4216

    IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to …

    IBM SmartCloud Analytics
  • Medium 6.1
    CVE-2019-4215

    IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim.…

    IBM SmartCloud Analytics
  • Medium 6.5
    CVE-2015-5694

    Designate does not enforce the DNS protocol limit concerning record set sizes

    Designate does not enforce the DNS protocol limit concerning record set sizes

    designate designate Debian PyPI
  • Medium 4.3
    CVE-2019-10203

    PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a seri…

    Red Hat pdns pdns pdns Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2018-10854

    cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in Clo…

    Red Hat CloudForms
  • Medium 6.4
    CVE-2019-10206

    Ansible password prompts could expose passwords

    ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent…

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI