Skip to content
OpenAdvisories

Archive

14 May 2019

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2019-12099 Public exploit EPSS 17%

    In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dy…

  • Unscored —
    CVE-2019-8978 Public exploit

    An improper authentication vulnerability can be exploited through a race condition that occurs in Ellucian Banner Web T…

  • Unscored —
    CVE-2019-11419 Public exploit

    vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause…

  • Unscored —
    CVE-2019-8923 Public exploit

    XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discon…

  • Unscored —
    CVE-2019-8404 Public exploit

    An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafte…

  • Unscored —
    CVE-2019-8391 Public exploit

    qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.

  • Unscored —
    CVE-2019-8390 Public exploit Scanner template

    qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.

  • Unscored —
    CVE-2018-18800 Public exploit

    The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p…