Skip to content
OpenAdvisories

Archive

15 June 2019

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Unscored —

    The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow paramet…

  • Unscored —
    CVE-2019-12840 Public exploit EPSS 78%

    In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root p…

  • Unscored —

    In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration (txtSendmailPath p…

  • Unscored —

    formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xml_memory_writer::write via characters…

  • Unscored —

    In MyBB before 1.8.21, an attacker can abuse a default behavior of MySQL on many systems (that leads to truncation of s…

  • Unscored —

    In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [vid…

  • Unscored —

    radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (applicatio…

  • Unscored —

    Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbi…