Archive
13 January 2019
Vulnerabilities first published on this day (UTC), newest first.
9 results · Feed
-
Unscored —
CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.
-
Unscored —CVE-2019-6250 Public exploit
A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_d…
-
Unscored —CVE-2019-6249 Public exploit
An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/ind…
-
Medium 5.4
katello Cross-site Scripting vulnerability
A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories…
-
Unscored —
Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject …
-
Unscored —
An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library …
-
Unscored —
An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overfl…
-
Unscored —
An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_…
-
Unscored —
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as dem…