Skip to content
OpenAdvisories

Archive

26 November 2019

Vulnerabilities first published on this day (UTC), newest first.

← October 2019 2019 / November /26 December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2011-1939 Public exploit

    SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compat…

    zendframework;PHP PHP zendframework
  • Unscored —
    CVE-2015-9538 Public exploit EPSS 10%

    The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

  • Unscored —
    CVE-2019-12489 Public exploit

    An issue was discovered on Fastweb Askey RTV1907VW 0.00.81_FW_200_Askey 2018-10-02 18:08:18 devices. By using the usb_r…

  • Unscored —
    CVE-2011-4350 Public exploit EPSS 16%

    Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user co…

    yaws yaws yaws Debian
  • Unscored —
    CVE-2011-4090 Public exploit

    Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.

    Serendipity Serendipity
  • Medium 5.4
    CVE-2019-15972 Public exploit

    Cisco Unified Communications Manager SQL Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management inter…

    Cisco Cisco Unified Communications Manager Network devices
  • High 7.7
    CVE-2019-15276 Public exploit EPSS 46%

    Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability

    A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists due to a failure of the HT…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices