Skip to content
OpenAdvisories

Archive

6 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /6 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • High 7.5
    CVE-2019-19625

    SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the unde…

  • High 7.5
    CVE-2019-19627

    SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection…

  • Unscored —
    CVE-2019-11554

    The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM…

  • Unscored —
    CVE-2019-19551

    In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management screen of the Administrator…

  • Unscored —
    CVE-2019-19552

    In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management screen of the Administrator…

  • Medium 6.5
    CVE-2019-19624

    Out-of-bounds Read in OpenCV

    An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small…

    opencv opencv-python opencv-contrib-python opencv Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2019-19619

    Cross-site Scripting in Documize

    domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS.

    github.com/documize/community Go
  • Critical 9.8
    CVE-2019-19617

    phpMyAdmin unsanitized Git information

    phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • Medium 4.3
    CVE-2019-19616

    An Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense (WebTE) interface used for …