Skip to content
OpenAdvisories

Archive

27 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /27 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2019-13237 Public exploit

    Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms

    In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workp…

    org.opencms:opencms-core Maven
  • Medium 6.1
    CVE-2019-13236 Public exploit

    XSS issues in the management interface

    In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.

    org.opencms:opencms-core Maven
  • Medium 6.1
    CVE-2019-13235 Public exploit

    XSS in login form

    In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

    org.opencms:opencms-core Maven
  • Medium 6.1
    CVE-2019-13234 Public exploit

    XSS in search engine

    In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

    org.opencms:opencms-core Maven