17 June 2019

70 results · Feed

• Unscored —
  CVE-2019-11407

  app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 suffers from an information disclosure…

  Jun 17, 2019
• Unscored —
  CVE-2019-12801 Public exploit

  out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Na…

  Jun 17, 2019
• Unscored —
  CVE-2017-9381

  An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capab…

  Jun 17, 2019
• Unscored —
  CVE-2017-9384

  An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface …

  Jun 17, 2019
• Unscored —
  CVE-2019-12476 Public exploit

  An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus befo…

  Jun 17, 2019
• Unscored —
  CVE-2017-9388

  An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface …

  Jun 17, 2019
• Unscored —
  CVE-2019-12549

  WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the…

  Jun 17, 2019
• Unscored —
  CVE-2019-12550

  WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords …

  Jun 17, 2019
• Unscored —
  CVE-2019-12789

  An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART ada…

  Jun 17, 2019
• Unscored —
  CVE-2019-6327

  HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer …

  Jun 17, 2019
• Unscored —
  CVE-2019-6326

  HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer …

  Jun 17, 2019
• Unscored —
  CVE-2019-6325

  HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer …

  Jun 17, 2019
• Unscored —
  CVE-2019-6324

  HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer …

  Jun 17, 2019
• Unscored —
  CVE-2019-6323

  HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer …

  Jun 17, 2019
• Unscored —
  CVE-2019-12181 Public exploit EPSS 65%

  A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.

  Jun 17, 2019
• High 7.1
  CVE-2018-1845

  IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack wh…

  IBM InfoSphere Information Server
  Jun 17, 2019
• Medium 6.5
  CVE-2019-4173

  IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to obtain sensitive info…

  IBM Cognos Controller
  Jun 17, 2019
• Medium 5.3
  CVE-2019-4176

  IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restr…

  IBM Cognos Controller
  Jun 17, 2019
• Medium 4.0
  CVE-2019-4177

  IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be rea…

  IBM Cognos Controller
  Jun 17, 2019
• Medium 4.0
  CVE-2019-4174

  IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be rea…

  IBM Cognos Controller
  Jun 17, 2019
• High 8.0
  CVE-2019-4103

  IBM Tivoli Netcool/Impact 7.1.0 allows for remote execution of command by low privileged User. Remote code execution al…

  IBM Tivoli Netcool Impact
  Jun 17, 2019
• Medium 5.4
  CVE-2019-4136

  IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site scripting. This vulnerabil…

  IBM Cognos Controller
  Jun 17, 2019
• Unscored —
  CVE-2018-10239

  A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a l…

  Jun 17, 2019
• Unscored —
  CVE-2018-20468

  An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" t…

  Jun 17, 2019
• Unscored —
  CVE-2018-20469 Public exploit EPSS 19%

  An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable t…

  Jun 17, 2019
• Unscored —
  CVE-2018-20470 Public exploit Scanner template EPSS 46%

  An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnera…

  Jun 17, 2019
• Unscored —
  CVE-2018-20472 Public exploit

  An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.

  Jun 17, 2019
• Unscored —
  CVE-2019-12868

  app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exis…

  Jun 17, 2019
• Unscored —
  CVE-2019-12248

  An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.1…

  otrs2 otrs2 Debian Ubuntu
  Jun 17, 2019
• Unscored —
  CVE-2019-12497

  An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.1…

  otrs2 otrs2 Debian Ubuntu
  Jun 17, 2019