Skip to content
OpenAdvisories

Archive

9 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /9 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-16145

    Cross-site scripting in padrino-contrib

    The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption.

    padrino-contrib RubyGems
  • Medium 6.1
    CVE-2019-16147

    Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title

    Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.

    com.liferay:com.liferay.journal.taglib Maven
  • Medium 5.4
    CVE-2019-16172 Public exploit

    Cross-site Scripting in LimeSurvey

    LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript that is mishandled upon group deletion.

    limesurvey/limesurvey Packagist
  • Medium 5.4
    CVE-2019-16173 Public exploit

    Cross-site Scripting in LimeSurvey

    LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This occurs in application/core/Survey_Common_Action.php,

    limesurvey/limesurvey Packagist
  • Medium 6.5
    CVE-2019-16168

    In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missi…

    sqlite3 sqlite3 ceph sqlite Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2019-10667

    Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS

    An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.

    librenms/librenms Packagist
  • Medium 6.1
    CVE-2019-16148

    Cross-site scripting in Sakai

    Sakai through 12.6 allows XSS via a chat user name.

    org.sakaiproject:chat-base Maven
  • Medium 4.8
    CVE-2019-16146

    Gophish XSS Vulnerability

    Gophish through 0.8.0 allows XSS via a username.

    github.com/gophish/gophish Go
  • Medium 6.1
    CVE-2019-16130

    Cross-site Scripting in YII2-CMS

    YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.

    yii2mod/yii2-cms Packagist
  • Medium 6.1
    CVE-2019-16126

    Cross-site Scripting in Grav

    Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.

    getgrav/grav Packagist