TVT NVMS 1000 - Local File Inclusion

TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. id: CVE-2019-20085 info: name: TVT NVMS 1000 - Local File Inclusion author: daffainfo severity: high description: | TVT NVMS-1000 devices allow GET /.. local file inclusion attacks. impact: | An attacker can exploit this...

CVE-2019-16728

creationtimestamp| type| source ---|---|--- 2026-07-07 14:02:53+00:00| seen| https://gist.github.com/UltraRamy/b344c7471b63468d9b5bc7bd3f33c59c...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in DataView. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2019-16869 DESCRIPTION: Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers such as a "Transfer-Encoding :...

CVE-2019-10954

creationtimestamp| type| source ---|---|--- 2026-07-05 23:58:39+00:00| seen| https://gist.github.com/HansBug/7d0884ae378f2f85ea1bb0aa04abe56d 2026-07-06 00:00:05+00:00| seen| https://gist.github.com/HansBug/7d0884ae378f2f85ea1bb0aa04abe56d 2026-07-06 00:06:10+00:00| seen|...

Oracle Linux 8 : ruby:2.5 (ELSA-2026-33514)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33514 advisory. - Fix integer overflow in searchinrange function in regexec.c CVE-2019-19012. Resolves: RHEL-87505 rubygem-abrt - Fix unexpected code execution in...

Apache Tapestry - Remote Code Execution

Apache Tapestry contains a critical unauthenticated remote code execution vulnerability. Affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. Note that this vulnerability is a bypass of the fix for CVE-2019-0195. Before that fix it was possible to download arbitrary class files from the...

CVE-2019-12988

creationtimestamp| type| source ---|---|--- 2026-06-30 14:18:36+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed18ecdc-65e9-4d33-8aa2-106767b35a27...

CVE-2019-14846

creationtimestamp| type| source ---|---|--- 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/c9d486870f097a37ad0c877eb49cb557 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/a9fb67eb63f86c81b9a4dd4dbc64a2b2 2026-07-02 02:03:21+00:00| seen|...

CVE-2019-10661

creationtimestamp| type| source ---|---|--- 2026-06-25 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp4feezuv32r...

ThinkPHP < 3.2.4 - Remote Code Execution

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...

Jira <8.4.0 - Server-Side Request Forgery

Jira before 8.4.0 is susceptible to server-side request forgery. The /plugins/servlet/gadgets/makeRequest resource contains a logic bug in the JiraWhitelist class, which can allow an attacker to access the content of internal network resources and thus modify data, and/or execute unauthorized...

CVE-2026-55454

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's admin API — which has no authentication by default — is bound on 0.0.0.0:2019 inside the container. While this listener is not directly published to the host by...

CVE-2026-55454 Appsmith: Caddy admin API exposed without authentication

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's admin API — which has no authentication by default — is bound on 0.0.0.0:2019 inside the container. While this listener is not directly published to the host by...

CVE-2019-12768

creationtimestamp| type| source ---|---|--- 2026-06-24 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2hdkb6tm2h...

CVE-2019-5319

creationtimestamp| type| source ---|---|--- 2026-06-24 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2amxhblq2q...

CVE-2019-13396

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0036015-b021-498e-9a48-fb6d161e83f2 2026-06-30 09:42:41+00:00| exploited|...

OPENSUSE-SU-2026:21149-1 Security update for bitcoin

This update for bitcoin fixes the following issues: Changes in bitcoin: - Reference the tracking bugs for CVEs already fixed in current bitcoin the affected versions all predate the shipped release: CVE-2018-20587 boo1125092 CVE-2019-15947 boo1149711 CVE-2020-14198 boo1181786 CVE-2021-3195...

ROOT-APP-PYPI-CVE-2019-11324 CVE-2019-11324 in rootio-urllib3 - Patched by Root

Root has patched CVE-2019-11324 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-10086 CVE-2019-10086 in io.root.commons-beanutils:commons-beanutils - Patched by Root

Root has patched CVE-2019-10086 in the io.root.commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...

CVE-2019-25763

creationtimestamp| type| source ---|---|--- 2026-06-20 15:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moq7z4l7zk2b...