19 July 2019

50 results · Feed

• Unscored —
  CVE-2019-11552

  Code42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.…

  Jul 19, 2019
• Unscored —
  CVE-2019-13648

  In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user…

  linux-hwe linux-azure linux-riscv linux Debian Ubuntu
  Jul 19, 2019
• Unscored —
  CVE-2019-13978

  Ovidentia 8.4.3 has SQL Injection via the id parameter in an index.php?tg=delegat&idx=mem request.

  Jul 19, 2019
• Unscored —
  CVE-2019-13977 Public exploit

  index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=site&idx=cre…

  Jul 19, 2019
• Unscored —
  CVE-2019-13974

  LayerBB 1.1.3 allows conversations.php/cmd/new CSRF.

  Jul 19, 2019
• Unscored —
  CVE-2019-13973

  LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted,…

  Jul 19, 2019
• Unscored —
  CVE-2019-13972

  LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997.

  Jul 19, 2019
• Unscored —
  CVE-2019-13971

  OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request.

  Jul 19, 2019
• Medium 6.1
  CVE-2019-13970

  AntSword RCE and XSS via code injection

  In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.

  antsword npm
  Jul 19, 2019
• Unscored —
  CVE-2019-13969

  Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_conte…

  Jul 19, 2019