Skip to content
OpenAdvisories

Archive

5 April 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2019-10887 Public exploit

    A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.8…

  • High 8.8
    CVE-2019-10874 Public exploit

    Bolt Cross Site Request Forgery (CSRF)

    Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.