Skip to content
OpenAdvisories

Archive

July 2019

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2019-1943 Public exploit

    Cisco Small Business Series Switches Open Redirect Vulnerability

    A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the pa…

  • Medium 5.4
    CVE-2019-10349 Public exploit

    Jenkins Dependency Graph Viewer Plugin contains Cross-site Scripting

    A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.

  • Medium 5.9
    CVE-2019-5630 Public exploit

    Rapid7 Nexpose/InsightVM Security Console CSRF

    A Cross-Site Request Forgery (CSRF) vulnerability was found in Rapid7 Nexpose InsightVM Security Console versions 6.5.0 through 6.5.68. This issue allows attackers to exploit CSRF vulnerabilities on API endpoints using Flash to circumvent a cross-domain pre-f…