Skip to content
OpenAdvisories

Archive

22 September 2019

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —
    CVE-2019-16692 Public exploit EPSS 10%

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is u…

  • Unscored —
    CVE-2019-16693 Public exploit

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.

  • Unscored —

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is use…

  • Unscored —

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used.

  • Unscored —

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used.

  • Unscored —

    Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.