Archive
18 September 2019
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server…
-
Unscored —
The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter.
-
Unscored —
The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A us…
-
Unscored —
The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php.