Archive
9 September 2019
Vulnerabilities first published on this day (UTC), newest first.
97 results · Feed
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x be…
-
Unscored —
An issue was discovered in GitLab Community Edition 11.9.x before 11.9.10 and 11.10.x before 11.10.2. It allows Informa…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x befor…
-
Medium 5.4CVE-2019-16172 Public exploit
Cross-site Scripting in LimeSurvey
LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript that is mishandled upon group deletion.
-
Medium 5.4CVE-2019-16173 Public exploit
Cross-site Scripting in LimeSurvey
LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This occurs in application/core/Survey_Common_Action.php,
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11…
-
Unscored —
An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in Git…
-
Unscored —
An input validation and output encoding issue was discovered in the GitLab email notification feature which could resul…
-
Unscored —
An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result …
-
Unscored —
An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of …
-
Unscored —
An input validation problem was discovered in the GitHub service integration which could result in an attacker being ab…
-
Low —
Sensitive Data Exposure in seneca
Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.
-
Critical 9.8
Improper Authentication in Apache Traffic Control
Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as …
-
Medium 6.5
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missi…
-
Unscored —
Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.
-
Unscored —
Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
-
Unscored —
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
-
Unscored —
MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c.
-
Unscored —
GNU cflow through 1.6 has a use-after-free in the reference function in parser.c.
-
Unscored —
GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.
-
Unscored —
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemo…
-
Unscored —
An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqli_escape_real_string fo…
-
High 8.1
SQL Injection in LibreNMS
An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajax_rulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajax_rulesuggest.php?debug=1…
-
High 7.5
Path Traversal in LibreNMS
An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /pdf.php file with a partial filename in the report parameter, to cause local file inclusion resulting in code execution.
-
High 8.8
Improper Encoding or Escaping of Output and Injection in LibreNMS
An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some parameters ar…
-
High 8.8
SQL Injection in LibreNMS
An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queries, resulting in SQL injection. An authenticated attacker can subvert these database queries to extract or manipulate data, as demonstrated…
-
Critical 9.1
Missing Authentication for Critical Function in LibreNMS
An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and …
-
Medium 5.3
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS
An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.
-
Unscored —
An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the inclu…
-
Critical 9.8
LibreNMS Information Disclosure
An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options (html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some par…
-
Unscored —
search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes.
-
Unscored —CVE-2019-15639 EPSS 22%
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a…
-
Unscored —
An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/de…
-
Medium 6.1
Cross-site scripting in Sakai
Sakai through 12.6 allows XSS via a chat user name.
-
Unscored —
In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted databa…
-
Medium 4.8
Gophish XSS Vulnerability
Gophish through 0.8.0 allows XSS via a username.
-
Unscored —
The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS.
-
Unscored —
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator …
-
Unscored —
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.
-
Unscored —
The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.