Skip to content
OpenAdvisories

Archive

17 June 2019

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2019-11409 Public exploit EPSS 87%

    app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerabil…

  • Unscored —
    CVE-2019-11408 Public exploit

    XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated a…

  • Unscored —
    CVE-2019-12801 Public exploit

    out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Na…

  • Unscored —
    CVE-2019-12476 Public exploit

    An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus befo…

  • Unscored —
    CVE-2019-12181 Public exploit EPSS 65%

    A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.

  • Unscored —
    CVE-2018-20469 Public exploit EPSS 19%

    An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable t…

  • Unscored —
    CVE-2018-20470 Public exploit Scanner template EPSS 46%

    An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnera…

  • Unscored —
    CVE-2018-20472 Public exploit

    An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.