Skip to content
OpenAdvisories

Archive

19 May 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Feed

  • Unscored —
    CVE-2019-12185 Public exploit EPSS 17%

    eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may…

  • Unscored —

    There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequenc…