Skip to content
OpenAdvisories

Archive

22 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /22 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

58 results · Feed

  • Unscored —
    CVE-2019-3427

    The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could ex…

    ZTE ZXCDN IAMWEB
  • Low 3.7
    CVE-2019-4570

    IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about i…

    IBM Tivoli Netcool Impact
  • Medium 5.1
    CVE-2019-4243

    IBM SmartCloud Analytics 1.3.1 through 1.3.5 allows unauthorized disclosure of information like accessing solrconfig.xm…

    IBM SmartCloud Analytics
  • Medium 5.4
    CVE-2019-4569

    IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulnerable to cross-site scripting. This vulnerability allows use…

    IBM Tivoli Netcool Impact
  • Medium 4.6
    CVE-2019-4216

    IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to …

    IBM SmartCloud Analytics
  • Low 3.7
    CVE-2019-4214

    IBM SmartCloud Analytics 1.3.1 through 1.3.5 does not set the secure attribute on authorization tokens or session cooki…

    IBM SmartCloud Analytics
  • Medium 6.1
    CVE-2019-4215

    IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim.…

    IBM SmartCloud Analytics
  • Unscored —
    CVE-2014-3585

    redhat-upgrade-tool: Does not check GPG signatures when upgrading versions

    Red Hat redhat-upgrade-tool
  • Unscored —
    CVE-2012-3407

    plow has local buffer overflow vulnerability

    plow plow
  • Unscored —
    CVE-2015-7810

    libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files

    libbluray libbluray libbluray libbluray Debian Ubuntu
  • Unscored —
    CVE-2015-1780

    oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center

    ovirt oVirt
  • Medium 6.5
    CVE-2015-5694

    Designate does not enforce the DNS protocol limit concerning record set sizes

    Designate does not enforce the DNS protocol limit concerning record set sizes

    designate designate Debian PyPI
  • Critical 9.1
    GHSA-9xr8-8hmc-389f

    Cross-Site Scripting in vant

    Versions of `vant` prior to 2.1.8 are vulnerable to Cross-Site Scripting. The text value of the `Picker` component column is not sanitized, which may allow attackers to execute arbitrary JavaScript in a victim's browser. ## Recommendation Upgrade to version 2…

    vant npm
  • Unscored —
    CVE-2019-19227

    In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because regist…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 4.3
    CVE-2019-10203

    PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a seri…

    Red Hat pdns pdns pdns Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2018-10854

    cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in Clo…

    Red Hat CloudForms
  • Unscored —
    CVE-2019-13157

    nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequence…

    NAVER Naver Vaccine
  • Medium 6.4
    CVE-2019-10206

    Ansible password prompts could expose passwords

    ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent…

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI