Skip to content
OpenAdvisories

Archive

18 September 2019

Vulnerabilities first published on this day (UTC), newest first.

44 results · Feed

  • Unscored —

    Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server…

  • Unscored —

    The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter.

  • Unscored —

    The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A us…

  • Unscored —

    The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php.