Skip to content
OpenAdvisories

Archive

11 February 2019

Vulnerabilities first published on this day (UTC), newest first.

47 results · Feed

  • Unscored —

    Frog CMS 0.9.5 provides a directory listing for a /public request.

  • Unscored —

    Traq 3.7.1 allows SQL Injection via a tickets?search= URI.

  • Unscored —

    Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).

  • Unscored —

    admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IM…

  • Unscored —

    Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.

  • Unscored —

    admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code…

  • Unscored —
    CVE-2019-5736 Public exploit EPSS 98%

    runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc …