Skip to content
OpenAdvisories

Archive

18 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /18 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.2
    CVE-2019-17390

    An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local privilege escalation i…

  • High —
    CVE-2019-15599

    Command Injection in tree-kill

    A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.

    tree-kill npm
  • High 7.5
    CVE-2019-15600

    Cross-Site Scripting in http_server

    A Path traversal exists in http_server which allows an attacker to read arbitrary system files.

    http_server npm
  • High 7.5
    CVE-2019-19724

    Singularity insecure permissions

    Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.

    singularity github.com/sylabs/singularity Alpine Go
  • High 8.7
    CVE-2019-18573

    The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Se…

    Dell RSA Identity Governance & Lifecycle
  • High 8.3
    CVE-2019-18572

    The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an I…

    Dell RSA Identity Governance & Lifecycle
  • High 7.1
    CVE-2019-18996

    ABB PB610 HMIStudio accepts malicious DLL file in an application

    Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s c…

    ABB PB610 Panel Builder 600 ICS / OT
  • High 7.8
    CVE-2019-8605 Exploited Public exploit EPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2019-7286 Exploited Public exploit EPSS 16%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave…

    Apple macOS iOS macOS iOS
    KEV May 23, 2022
  • High 7.8
    CVE-2019-8526 Exploited

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An a…

    Apple macOS macOS
    KEV Apr 17, 2023
  • High 8.8
    CVE-2019-8506 Exploited Public exploit EPSS 16%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

    Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine
    KEV May 4, 2022
  • High 7.8
    CVE-2019-7287 Exploited

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An applicati…

    Apple iOS iOS
    KEV May 23, 2022
  • High 7.4
    CVE-2019-5152

    An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-…

    shadowsocks-libev shadowsocks-libev Debian Ubuntu