Skip to content
OpenAdvisories

Archive

16 September 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.7

    IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote attacker could send speciall…

  • Medium 4.7

    Beego has a file creation race condition

    The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.

  • Medium 6.1
    CVE-2019-16197 Public exploit

    Cross-site scripting in Dolibarr

    In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.