Skip to content
OpenAdvisories

Archive

November 2019

Vulnerabilities first published in this month (UTC), newest first.

← October 2019 2019 / November December 2019 →
  1. 132
  2. 210
  3. 3 
  4. 443
  5. 5119
  6. 6112
  7. 765
  8. 827
  9. 929
  10. 10 
  11. 1110
  12. 12138
  13. 13111
  14. 14262
  15. 1536
  16. 163
  17. 174
  18. 1877
  19. 1931
  20. 2042
  21. 21106
  22. 2258
  23. 23 
  24. 24 
  25. 25154
  26. 26120
  27. 2749
  28. 2810
  29. 2933
  30. 305
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-12409 Public exploit EPSS 22%

    Unrestricted upload of file with dangerous type in Apache Solr

    The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, the…

    Apache Solr org.apache.solr:solr-core Maven
  • Critical 9.8
    CVE-2019-3663 Public exploit

    Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability

    Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of Hi…

    McAfee Advanced Threat Defense (ATD)
  • Critical 9.8
    CVE-2019-5029 Public exploit EPSS 57%

    An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.…

  • Critical 9.8
    CVE-2019-18818 Public exploit Scanner template EPSS 97%

    Strapi allows unauthenticated attacker to reset admin password without valid reset token

    strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.

    strapi npm
  • Critical 9.8
    CVE-2011-3923 Public exploit EPSS 89%

    Struts ParameterInterceptor vulnerability allows remote command execution

    Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

    Apache Struts org.apache.struts:struts2-core Maven