Archive

20 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /20 June 2019 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Medium 6.1

CVE-2019-10078 Public exploit

Cross-site Scriptin in JSPWiki

A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were …

Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main org.apache.jspwiki:jspwiki-war Maven

May 20, 2019
Medium 6.1

CVE-2019-10077 Public exploit

Cross-site Scripting in JSPWiki

A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.

Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main org.apache.jspwiki:jspwiki-war Maven

May 20, 2019
Medium 6.1

CVE-2019-10076 Public exploit

Cross-Site Scripting in JSPWiki

A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.

Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main org.apache.jspwiki:jspwiki-war Maven

May 20, 2019
Medium 6.5

CVE-2019-4058

IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements …

IBM BigFix Platform

May 20, 2019
Medium 5.3

CVE-2019-4293

IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default insta…

IBM Storwize V7000 Unified (2073)

May 20, 2019
Medium 5.4

CVE-2019-4011

IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

IBM BigFix Platform

May 20, 2019