Skip to content
OpenAdvisories

Archive

2 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /2 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2014-9356

    Path Traversal in Docker

    Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.

    docker.io github.com/docker/docker Debian Go
  • Medium 5.3
    CVE-2019-19507

    Validation bypass is possible in Json Pattern Validator

    In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payl…

    jpv npm
  • Medium 6.5
    CVE-2019-19118

    Django allows unintended model editing

    Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing. A Django model admin displaying inline related models, where the user has view-only permissions to a parent model but edit permissions to the inline model, would be presented with …

    python-django django Debian PyPI
  • Medium 4.3
    CVE-2019-19362

    An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vend…