Skip to content
OpenAdvisories

Archive

17 December 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2019-19241 Public exploit

    In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabil…

  • Critical 9.8
    CVE-2019-19634 Public exploit

    class.upload.php in verot.net omits .pht from the set of dangerous file extensions

    class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576.

  • Unscored —
    CVE-2019-19315 Public exploit

    NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Pri…