Skip to content
OpenAdvisories

Archive

December 2019

Vulnerabilities first published in this month (UTC), newest first.

← November 2019 2019 / December January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • High 7.5
    CVE-2019-17558 Exploited Public exploit Scanner template EPSS 99%

    Improper Input Validation in Apache Solr

    Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configse…

    org.apache.solr:solr-core lucene-solr Debian Maven
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-17621 Exploited Public exploit EPSS 91%

    The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated re…

    KEV Jun 29, 2023
  • High 7.5
    CVE-2019-20085 Exploited Public exploit Scanner template EPSS 96%

    TVT NVMS-1000 devices allow GET /.. Directory Traversal

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-19781 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. T…

    KEV Nov 3, 2021
  • Critical 9.9
    CVE-2019-10758 Exploited Public exploit Scanner template EPSS 85%

    Remote Code Execution Vulnerability in NPM mongo-express

    mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

    mongo-express npm
    KEV Dec 10, 2021
  • High 7.5
    CVE-2019-7483 Exploited

    In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user …

    SonicWall SMA100 Network devices
    KEV Mar 28, 2022
  • High 7.8
    CVE-2019-8605 Exploited Public exploit EPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2019-7286 Exploited Public exploit EPSS 16%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave…

    Apple macOS iOS macOS iOS
    KEV May 23, 2022
  • High 7.8
    CVE-2019-8526 Exploited

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An a…

    Apple macOS macOS
    KEV Apr 17, 2023
  • High 8.8
    CVE-2019-8506 Exploited Public exploit EPSS 16%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

    Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine
    KEV May 4, 2022
  • High 7.8
    CVE-2019-7287 Exploited

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An applicati…

    Apple iOS iOS
    KEV May 23, 2022
  • Critical 10.0
    CVE-2019-4716 Exploited Public exploit Scanner template EPSS 86%

    IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated us…

    IBM Planning Analytics
    KEV Nov 3, 2021
  • High 7.5
    CVE-2019-7481 Exploited · Ransomware Scanner template EPSS 100%

    Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This v…

    SonicWall SMA100 Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-18935 Exploited · Ransomware Public exploit EPSS 100%

    Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncU…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2019-1458 Exploited · Ransomware Public exploit EPSS 74%

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows Windows Server Windows
    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2019-5544 Exploited · Ransomware Public exploit Scanner template EPSS 98%

    OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…

    openslp-dfsg openslp Virtualization Ubuntu Azure Linux
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-7195 Exploited · Ransomware Public exploit Scanner template EPSS 89%

    This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7194 Exploited · Ransomware Public exploit Scanner template EPSS 83%

    This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7193 Exploited · Ransomware EPSS 14%

    This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2019-7192 Exploited · Ransomware Public exploit Scanner template EPSS 88%

    This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix th…

    KEV Jun 8, 2022