Skip to content
OpenAdvisories

Archive

20 June 2019

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2019-12745 Public exploit

    out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting (XSS) via the name field.

  • Unscored —
    CVE-2019-12744 Public exploit EPSS 11%

    SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a differ…

  • Unscored —
    CVE-2018-16119 Public exploit EPSS 34%

    Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to exe…

  • Unscored —
    CVE-2019-12905 Public exploit

    FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. This issue has been fixed…