Archive
14 May 2019
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Unscored —
In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dy…
-
Unscored —CVE-2019-8978 Public exploit
An improper authentication vulnerability can be exploited through a race condition that occurs in Ellucian Banner Web T…
-
Unscored —CVE-2019-11419 Public exploit
vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause…
-
Unscored —CVE-2019-8923 Public exploit
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discon…
-
Unscored —CVE-2019-8404 Public exploit
An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafte…
-
Unscored —CVE-2019-8391 Public exploit
qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.
-
Unscored —
qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.
-
Unscored —CVE-2018-18800 Public exploit
The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p…