Skip to content
OpenAdvisories

Archive

11 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /11 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

139 results · Feed

  • Unscored —
    CVE-2019-8449 Public exploit Scanner template EPSS 86%

    The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernam…

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2019-8450

    Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0…

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2019-8451 Public exploit Scanner template EPSS 94%

    The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the co…

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2019-14995

    The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an att…

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2019-14997

    The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other u…

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2019-14998

    The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remo…

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2019-14996

    The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows r…

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2019-16217

    WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-16219

    WordPress before 5.2.3 allows XSS in shortcode previews.

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-16221

    WordPress before 5.2.3 allows reflected XSS in the dashboard.

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-16222

    WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-16223 Public exploit

    WordPress before 5.2.3 allows XSS in post previews by authenticated users.

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-16220

    In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php co…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-16218

    WordPress before 5.2.3 allows XSS in stored comments.

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-16193

    In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack throu…

  • Unscored —
    CVE-2019-14724

    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an…

  • Unscored —
    CVE-2019-14725

    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change …

  • Unscored —
    CVE-2019-16214

    Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attacke…

  • Unscored —
    CVE-2019-13473

    TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd,…