Skip to content
OpenAdvisories

Archive

31 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /31 January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Unscored —
    CVE-2015-5595 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin.php in Zenphoto before 1.4.9 allows remote attackers to hijack…

  • Unscored —
    CVE-2015-5591 Public exploit

    SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands.

  • Unscored —
    CVE-2019-20197 Public exploit EPSS 23%

    In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id p…

  • Unscored —
    CVE-2019-10227 Public exploit

    openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component.

  • Unscored —
    CVE-2019-7751 Public exploit EPSS 14%

    A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, fo…

  • Medium 6.1
    CVE-2019-9553 Public exploit

    Bolt Cross-site Scripting via the slug, teaser or title parameters

    Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

    bolt/bolt Packagist
  • Unscored —
    CVE-2019-9554 Public exploit

    In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code a…

  • Unscored —
    CVE-2019-9556 Public exploit

    FiberHome an5506-04-f RP2669 devices have XSS.