Archive
18 June 2019
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Medium 6.7
exacqVision Enterprise System Manager (ESM) privilege escalation
A vulnerability in the exacqVision Enterprise System Manager (ESM) v5.12.2 application whereby unauthorized privilege escalation can potentially be achieved. This vulnerability impacts exacqVision ESM v5.12.2 and all prior versions of ESM running on a Windows…
-
Unscored —
dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via vie…
-
Unscored —
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected Cross-site scripting (XSS…
-
Unscored —
Helpy v2.1.0 has Stored XSS via the Ticket title.
-
Unscored —
Artha ~ The Open Thesaurus 1.0.3.0 has a Buffer Overflow.
-
Unscored —
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugi…
-
Unscored —CVE-2019-6965 Public exploit
An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.
-
Unscored —
OX App Suite 7.10.1 and earlier allows Information Exposure.
-
Unscored —
An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046…
-
Medium 6.1
Craft CMS XSS Vulnerability
Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS.