Skip to content
OpenAdvisories

Archive

December 2019

Vulnerabilities first published in this month (UTC), newest first.

← November 2019 2019 / December January 2020 →
  1. 15
  2. 241
  3. 364
  4. 438
  5. 547
  6. 649
  7. 7 
  8. 89
  9. 927
  10. 10100
  11. 1177
  12. 12123
  13. 1359
  14. 14 
  15. 1510
  16. 1648
  17. 1771
  18. 18369
  19. 1956
  20. 2036
  21. 21 
  22. 222
  23. 2357
  24. 2421
  25. 253
  26. 2673
  27. 2766
  28. 281
  29. 2912
  30. 3079
  31. 3144
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.5
    CVE-2019-20149 Public exploit

    Validation Bypass in kind-of

    ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate…

    js-jquery kind-of node-kind-of node-kind-of Debian Ubuntu Azure Linux npm
  • High 7.5
    CVE-2019-17558 Exploited Public exploit Scanner template EPSS 99%

    Improper Input Validation in Apache Solr

    Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configse…

    org.apache.solr:solr-core lucene-solr Debian Maven
    KEV Nov 3, 2021
  • High 7.5
    CVE-2019-20085 Exploited Public exploit Scanner template EPSS 96%

    TVT NVMS-1000 devices allow GET /.. Directory Traversal

    KEV Nov 3, 2021
  • High 7.3
    CVE-2019-19231 Public exploit

    An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that …

    CA Technologies, Broadcom Company CA Client Automation
  • High 7.8
    CVE-2019-8605 Exploited Public exploit EPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2019-7286 Exploited Public exploit EPSS 16%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave…

    Apple macOS iOS macOS iOS
    KEV May 23, 2022
  • High 8.8
    CVE-2019-8506 Exploited Public exploit EPSS 16%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

    Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine
    KEV May 4, 2022
  • High 7.8
    CVE-2019-1458 Exploited · Ransomware Public exploit EPSS 74%

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows Windows Server Windows
    KEV Jan 10, 2022
  • High 8.8
    CVE-2012-1592 Public exploit EPSS 29%

    Unrestricted Upload of File with Dangerous Type in Apache Struts2

    A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.

    libstruts1.2-java libstruts1.2-java org.apache.struts:struts2-core Maven
  • High 7.2
    CVE-2019-19609 Public exploit EPSS 54%

    Command Injection in strapi

    The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be execute…

    strapi npm