Archive
15 June 2019
Vulnerabilities first published on this day (UTC), newest first.
8 results · Feed
-
Unscored —
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow paramet…
-
Unscored —
In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root p…
-
Unscored —
In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration (txtSendmailPath p…
-
Unscored —
formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xml_memory_writer::write via characters…
-
Unscored —
In MyBB before 1.8.21, an attacker can abuse a default behavior of MySQL on many systems (that leads to truncation of s…
-
Unscored —
In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [vid…
-
Unscored —
radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (applicatio…
-
Unscored —
Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbi…