Skip to content
OpenAdvisories

Archive

31 January 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2018-19043 Public exploit EPSS 10%

    The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename…

  • Unscored —
    CVE-2018-19041 Public exploit

    The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to th…

  • Unscored —
    CVE-2018-19040 Public exploit EPSS 12%

    The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir par…

  • Unscored —
    CVE-2018-19042 Public exploit EPSS 10%

    The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the d…

  • Unscored —
    CVE-2019-7216 Public exploit

    An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user…

  • Medium 6.8
    CVE-2019-6110 Public exploit EPSS 25%

    In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-…

  • Medium 5.9
    CVE-2019-6111 Public exploit EPSS 58%

    An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses w…