Skip to content
OpenAdvisories

Archive

23 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /23 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.9
    CVE-2019-10755

    Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml

    The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects t…

    org.pac4j:pac4j-saml Maven
  • Medium 6.5
    CVE-2019-10990

    Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password t…

    Windows
  • Medium 6.1
    CVE-2019-12407

    Cross-site Scripting in Apache JSPWiki

    On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the vic…

    org.apache.jspwiki:jspwiki-main org.apache.jspwiki:jspwiki-war Maven
  • Medium 6.1
    CVE-2019-10090

    Cross-site scripting in Apache JSPWiki

    On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some…

    org.apache.jspwiki:jspwiki-war Maven
  • Medium 6.1
    CVE-2019-12404

    Cross-site scripting in Apache JSPWiki

    On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some …

    org.apache.jspwiki:jspwiki-war Maven
  • Medium 6.1
    CVE-2019-10089 Public exploit

    Cross-site scripting in Apache JSPWiki

    On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get so…

    org.apache.jspwiki:jspwiki-war Maven
  • Medium 6.1
    CVE-2019-10087

    Cross-site scripting in Apache JSPWiki

    On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and…

    org.apache.jspwiki:jspwiki-war Maven