Skip to content
OpenAdvisories

Archive

4 September 2019

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2019-12586 Public exploit

    The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processe…

  • Unscored —
    CVE-2019-14319 Public exploit

    The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, vi…

  • Medium 6.1
    CVE-2019-14470 Public exploit Scanner template EPSS 83%

    Cosenary Instagram-PHP-API contains reflected XSS vulnerability

    cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter.

  • Unscored —
    CVE-2019-15814 Public exploit

    Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or…

  • Unscored —
    CVE-2019-15813 Public exploit EPSS 33%

    Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute ar…

  • Unscored —
    CVE-2019-10709 Public exploit EPSS 12%

    AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP devi…