Skip to content
OpenAdvisories

Archive

11 July 2019

Vulnerabilities first published on this day (UTC), newest first.

84 results · Feed

  • Unscored —

    The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1.

  • Unscored —

    mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read.

  • Unscored —

    There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2.

  • High 7.2

    A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the …