Archive
9 September 2019
Vulnerabilities first published on this day (UTC), newest first.
97 results · Feed
-
Unscored —
A Cross-Site Request Forgery (CSRF) vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify …
-
Unscored —
res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by se…
-
Medium 6.1
Cross-site scripting in padrino-contrib
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption.
-
Medium 6.1
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title
Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.
-
Unscored —
An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially …
-
Unscored —
A clickjacking vulnerability was found in Limesurvey before 3.17.14.
-
Unscored —
A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the pa…
-
Unscored —
In Limesurvey before 3.17.14, the entire database is exposed through browser caching.
-
Unscored —
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbi…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated user…
-
Unscored —
Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration.
-
Unscored —
Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP au…
-
Unscored —
In Limesurvey before 3.17.14, admin users can mark other users' notifications as read.
-
Unscored —
A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attacker…
-
Unscored —
In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions.
-
Unscored —
A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands…
-
Unscored —
In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.
-
Unscored —
Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting in 10.7) and 11.x before 11.5.8, 11.6…
-
Unscored —
An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6…
-
Unscored —
SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 d…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x befor…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —CVE-2019-6793 Scanner template
An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befo…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unpr…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x be…