16 March 2019

10 results · Feed

• Unscored —
  CVE-2019-7223

  InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password"…

  Mar 16, 2019
• Unscored —
  CVE-2019-9846

  RockOA 1.8.7 allows remote attackers to obtain sensitive information because the webmain/webmainAction.php publictreest…

  Mar 16, 2019
• Unscored —
  CVE-2018-20811

  A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12.

  Mar 16, 2019
• Unscored —
  CVE-2018-20809

  A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and…

  Mar 16, 2019
• Unscored —
  CVE-2018-20813

  An input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2.

  Mar 16, 2019
• Unscored —
  CVE-2018-20812

  An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement …

  Mar 16, 2019
• Unscored —
  CVE-2018-20814

  An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Po…

  Mar 16, 2019
• Unscored —
  CVE-2018-20808

  An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header …

  Mar 16, 2019
• Unscored —
  CVE-2018-20810

  Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Conne…

  Mar 16, 2019
• Unscored —
  CVE-2018-20807

  An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before…

  Mar 16, 2019