Skip to content
OpenAdvisories

Archive

21 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /21 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2019-16681

    The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to …

  • Unscored —
    CVE-2019-16680

    An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename con…

    file-roller file-roller Debian Ubuntu
  • Unscored —
    CVE-2019-16679 Public exploit

    Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.

  • Unscored —
    CVE-2019-16677

    An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.

  • Unscored —
    CVE-2019-16678

    admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.

  • Medium 5.3
    CVE-2019-16669

    Pagekit User enumeration

    The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts.

    pagekit/pagekit Packagist
  • Unscored —
    CVE-2019-16664

    An issue was discovered in ThinkSAAS 2.91. There is XSS via the index.php?app=group&ac=create&ts=do groupname parameter.

  • Unscored —
    CVE-2019-16665

    An issue was discovered in ThinkSAAS 2.91. There is XSS via the content to the index.php?app=group&ac=comment&ts=do&js=…

  • Unscored —
    CVE-2019-16655

    joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.

  • Unscored —
    CVE-2019-16656

    joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of…

  • Unscored —
    CVE-2019-16657

    TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.

  • Unscored —
    CVE-2019-16658

    TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.

  • Unscored —
    CVE-2019-16659

    TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.

  • Unscored —
    CVE-2019-16660

    joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF.

  • Unscored —
    CVE-2019-16661

    Ogma CMS 0.5 has XSS via creation of a new blog.

  • Unscored —
    CVE-2019-16649

    On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the …

  • Unscored —
    CVE-2019-16650

    On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later ha…