Skip to content
OpenAdvisories

Archive

16 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /16 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-12413

    Users able to query database metadata in Apache Superset

    In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query.

    apache-superset PyPI
  • Medium 5.3
    CVE-2019-12414

    Users can view database names in Apache Superset

    In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab

    apache-superset PyPI
  • Medium 5.8
    CVE-2019-16779

    In RubyGem excon, interrupted Persistent Connections May Leak Response Data

    In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the …

    excon excon excon ruby-excon Debian Ubuntu RubyGems
  • Medium 5.3
    CVE-2019-4560

    IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by cha…

    IBM MQ
  • Medium 5.1
    CVE-2019-4444

    IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocompl…

    IBM API Connect