Skip to content
OpenAdvisories

Archive

10 June 2019

Vulnerabilities first published on this day (UTC), newest first.

← May 2019 2019 / June /10 July 2019 →
  1. 11
  2. 24
  3. 396
  4. 436
  5. 5167
  6. 657
  7. 779
  8. 8 
  9. 9 
  10. 1023
  11. 1145
  12. 12126
  13. 1345
  14. 1449
  15. 158
  16. 161
  17. 1770
  18. 1850
  19. 1995
  20. 2056
  21. 2125
  22. 22 
  23. 233
  24. 2430
  25. 2526
  26. 2635
  27. 27108
  28. 2829
  29. 2915
  30. 3024
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.7
    CVE-2019-11881 Public exploit

    Rancher Login Parameter Can Be Edited

    A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malici…

    github.com/rancher/rancher Go
  • Unscored —
    CVE-2019-12788 Public exploit

    An issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with Administrator privileges)…

  • Unscored —
    CVE-2019-9881 Public exploit Scanner template EPSS 18%

    The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on…

    Web / CMS
  • Unscored —
    CVE-2019-9880 Public exploit Scanner template EPSS 35%

    An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible,…

    Web / CMS
  • Unscored —
    CVE-2019-9879 Public exploit Scanner template EPSS 46%

    The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever…

    Web / CMS
  • Unscored —
    CVE-2019-12780 Public exploit EPSS 71%

    The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the Set…

  • Unscored —
    CVE-2019-10226 Public exploit

    HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to t…