Skip to content
OpenAdvisories

Archive

11 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /11 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2019-7004 Public exploit

    Avaya IP Office XSS Vulnerability

    A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, i…

    Avaya IP Office Application Server
  • Medium 6.1
    CVE-2019-10772

    Sanitizer bypass in svg-sanitizer

    It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the "xlink:href" attribute due to mishandling of the xlink namespace by the sanitizer.

    enshrined/svg-sanitize Packagist
  • Medium 5.4
    CVE-2019-4665

    IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

    IBM Spectrum Scale
  • Medium 6.1
    CVE-2013-7371

    Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware

    node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)

    node-connect node-connect connect npm
  • Medium 6.6
    CVE-2019-3667

    DLL Search Order Hijacking

    DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker.

    McAfee McAfee TechCheck
  • Medium 6.1
    CVE-2019-19709

    Possible to circumvent title-blacklist

    MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the action API when editing that page.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist