Skip to content
OpenAdvisories

Archive

5 December 2019

Vulnerabilities first published on this day (UTC), newest first.

47 results · Feed

  • Critical 9.8

    The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are vali…

  • Unscored —
    CVE-2019-19597 EPSS 21%

    D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via s…

  • Unscored —

    D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNA…

  • Medium 5.4

    GitBook allows Cross-site Scripting via a local .md file.

    GitBook through 2.6.9 allows XSS via a local .md file.

  • Unscored —

    In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at…

  • Unscored —

    In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/a…

  • High 7.5

    Uncontrolled resource consumption in validators Python package

    The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6.