Skip to content
OpenAdvisories

Archive

3 December 2019

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Medium 5.9

    An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When ut…

  • Medium 5.3
    CVE-2019-5097 EPSS 45%

    A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web ser…

  • Medium 5.6

    Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malic…

  • Medium 5.6

    Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malic…

  • Medium 4.8

    RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the…

  • Medium 5.4

    IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…

  • Medium 5.4

    IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…

  • Medium 4.0

    IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the sys…

  • Medium 5.4

    IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…

  • Medium 5.4

    IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…

  • Medium 6.5

    Code Injection vulnerability

    Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site.

  • Medium 6.5

    API Abuse Vulnerability

    API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site.