Skip to content
OpenAdvisories

Archive

29 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /29 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.8
    CVE-2019-7170

    Croogo vulnerable to XSS in title field

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/taxonomy/vocabularies.

    croogo/croogo Packagist
  • Medium 4.8
    CVE-2019-7173

    Croogo vulnerable to Cross-site Scripting in title field

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4.

    croogo/croogo Packagist
  • Medium 4.8
    CVE-2019-7168

    Croogo vulnerable to XSS in Blog field

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog.

    croogo/croogo Packagist
  • Medium 4.8
    CVE-2019-7171

    Croogo vulnerable to XSS in title field

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/blocks/blocks/edit/8.

    croogo/croogo Packagist
  • Medium 4.8
    CVE-2019-7169

    Croogo vulnerable to XSS in title field

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/menus/menus/edit/3.

    croogo/croogo Packagist
  • Medium 5.4
    CVE-2019-3806

    An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied…

    PowerDNS pdns-recursor pdns-recursor pdns-recursor Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2018-16880

    A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under…

    The Linux Foundation Kernel linux-hwe linux-azure Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2018-1668

    IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through…

    IBM DataPower Gateway
  • Medium 4.9
    CVE-2018-1976

    IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow…

    IBM API Connect
  • Medium 5.3
    CVE-2018-1733

    IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane imp…

    IBM QRadar SIEM