Skip to content
OpenAdvisories

Archive

14 May 2019

Vulnerabilities first published on this day (UTC), newest first.

49 results · Feed

  • Unscored —
    CVE-2019-8391 Public exploit

    qdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.

  • Unscored —
    CVE-2019-8390 Public exploit Scanner template

    qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.

  • Unscored —

    An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to …

  • Unscored —

    An issue was discovered in WSO2 API Manager 2.6.0. Uploaded documents for API documentation are available to an unauthe…

  • Unscored —

    An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stor…

  • Unscored —

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to perform requests to the i…

  • Unscored —
    CVE-2018-18800 Public exploit

    The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p…

  • Unscored —

    Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting a…

  • Unscored —

    Samsung S9+, S10, and XCover 4 P(9.0) devices can become temporarily inoperable because of an unprotected intent in the…