Archive

20 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /20 January 2020 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 9.8

CVE-2019-19919 Public exploit

Prototype Pollution in handlebars

Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payl…

handlebars node-handlebars node-handlebars bootstrap-wysihtml5-rails Debian Ubuntu npm RubyGems

Dec 20, 2019
High 7.3

CVE-2019-19231 Public exploit

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that …

CA Technologies, Broadcom Company CA Client Automation

Dec 20, 2019
Critical 9.8

CVE-2019-17571 Public exploit EPSS 70%

Deserialization of Untrusted Data in Log4j

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log dat…

Apache Software Foundation Log4j druid apache-log4j1.2 Debian Ubuntu Wolfi Maven

Dec 20, 2019
Medium 6.1

CVE-2016-1000229 Public exploit

Improper Neutralization of Input During Web Page Generation in swagger-ui

swagger-ui has XSS in key names

swagger-ui npm

Dec 20, 2019