Skip to content
OpenAdvisories

Archive

5 December 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2012-1592 Public exploit EPSS 29%

    Unrestricted Upload of File with Dangerous Type in Apache Struts2

    A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.

  • High 7.2
    CVE-2019-19609 Public exploit EPSS 54%

    Command Injection in strapi

    The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be execute…