Skip to content
OpenAdvisories

Archive

18 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /18 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium —
    CVE-2019-15596

    Path Traversal in statics-server

    A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory.

    statics-server npm
  • Medium 5.4
    CVE-2019-18571

    The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a re…

    Dell RSA Identity Governance & Lifecycle
  • Medium 4.3
    CVE-2019-18997

    PB610 HMISimulator provides interface with access to arbitrary files

    The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working dire…

    ABB PB610 Panel Builder 600 ICS / OT
  • Medium 4.3
    CVE-2019-18995

    ABB PB610 HMISimulator does not check content-length of the HTTP request

    The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting.

    ABB PB610 Panel Builder 600 ICS / OT
  • Medium 6.3
    CVE-2019-16782

    Possible Information Leak / Session Hijack Vulnerability in Rack

    There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session …

    rack rack rack ruby-rack Debian Ubuntu RubyGems
  • Medium 5.9
    CVE-2019-4609

    IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h…

    IBM API Connect