Skip to content
OpenAdvisories

Archive

13 January 2019

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —

    CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.

  • Unscored —
    CVE-2019-6250 Public exploit

    A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_d…

  • Unscored —
    CVE-2019-6249 Public exploit

    An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/ind…

  • Medium 5.4

    katello Cross-site Scripting vulnerability

    A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories…

  • Unscored —

    Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject …

  • Unscored —

    An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library …

  • Unscored —

    An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overfl…

  • Unscored —

    An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_…

  • Unscored —

    PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as dem…