| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-7574 | - | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7576, CVE-2018-21233. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should co | 2023-11-07 03:01:00 | 2019-04-24 21:29:00 |
| CVE-2019-0223 | 5.8 | While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer cert | 2023-11-07 03:01:00 | 2019-04-23 16:29:00 |
| CVE-2019-0218 | 4.3 | A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface. | 2023-11-07 03:01:00 | 2019-04-22 22:29:00 |
| CVE-2019-0228 | 7.5 | Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF. | 2023-11-07 03:01:00 | 2019-04-17 15:29:00 |
| CVE-2019-0229 | 6.8 | A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery attacks. | 2023-11-07 03:01:00 | 2019-04-10 20:29:00 |
| CVE-2019-0216 | 3.5 | A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. | 2023-11-07 03:01:00 | 2019-04-10 20:29:00 |
| CVE-2019-0034 | - | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a vulnerability. Notes: Google gRPC credentials were found which existed for specific internal product te | 2023-11-07 03:01:00 | 2019-04-10 20:29:00 |
| CVE-2019-0208 | - | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none | 2023-11-07 03:01:00 | 2019-04-10 19:15:00 |
| CVE-2019-0217 | 6.0 | In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictio | 2023-11-07 03:01:00 | 2019-04-08 21:29:00 |
| CVE-2019-0215 | 6.0 | In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions. | 2023-11-07 03:01:00 | 2019-04-08 20:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39839
Zapisa po stranici: