Skip to content
OpenAdvisories

Archive

10 July 2019

Vulnerabilities first published on this day (UTC), newest first.

← June 2019 2019 / July /10 August 2019 →
  1. 160
  2. 268
  3. 397
  4. 448
  5. 561
  6. 619
  7. 74
  8. 833
  9. 937
  10. 1090
  11. 1184
  12. 1211
  13. 132
  14. 146
  15. 1585
  16. 1636
  17. 1768
  18. 1860
  19. 1950
  20. 20 
  21. 2113
  22. 2236
  23. 23244
  24. 2422
  25. 2569
  26. 2636
  27. 2720
  28. 2820
  29. 2987
  30. 3095
  31. 3162
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-5444

    Path Traversal in serve-here.js

    Path traversal vulnerability in version up to v1.1.3 in serve-here.js npm module allows attackers to list any file in arbitrary folder.

    serve-here.js npm
  • Medium 6.5
    CVE-2019-12470

    Wikimedia MediaWik exposed suppressed log in RevisionDelete page

    Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2019-12469

    MediaWiki Incorrect Access Control vulnerability

    MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2019-12471

    MediaWiki Cross-site Scripting (XSS)

    Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist
  • Medium 5.3
    CVE-2019-12467

    MediaWiki Incorrect Access Control vulnerability

    MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2017-6217

    paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS

    paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution

    paypal/adaptivepayments-sdk-php Packagist