Skip to content
OpenAdvisories

Archive

5 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /5 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2012-1592 Public exploit EPSS 29%

    Unrestricted Upload of File with Dangerous Type in Apache Struts2

    A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.

    libstruts1.2-java libstruts1.2-java org.apache.struts:struts2-core Maven
  • High 7.2
    CVE-2019-19609 Public exploit EPSS 54%

    Command Injection in strapi

    The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be execute…

    strapi npm
  • High 7.8
    CVE-2019-17437

    PAN-OS: Custom-role users may escalate privileges

    An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.…

    Palo Alto Networks PAN-OS Network devices
  • High 7.5
    CVE-2019-19588

    Uncontrolled resource consumption in validators Python package

    The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6.

    validators PyPI