Skip to content
OpenAdvisories

Archive

16 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /16 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2019-0207 Public exploit

    Path traversal attack on Windows platforms

    Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn't filter the character `\`, so attacker can perform a path traversal attack to read any files on Windows platform.

    Apache Apache Tapestry org.apache.tapestry:tapestry-core Maven
  • Medium 6.1
    CVE-2019-16197 Public exploit

    Cross-site scripting in Dolibarr

    In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2016-10956 Public exploit Scanner template EPSS 11%

    The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.