Skip to content
OpenAdvisories

Archive

26 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /26 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-12562 Public exploit

    Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke

    Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing conten…

    DotNetNuke.Core NuGet
  • Unscored —
    CVE-2019-16667 Public exploit EPSS 55%

    diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by execut…

  • Unscored —
    CVE-2019-16894 Public exploit

    download.php in inoERP 4.15 allows SQL injection through insecure deserialization.

  • Unscored —
    CVE-2019-10092 Public exploit Scanner template EPSS 81%

    In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error pag…

    apache2 apache2 apache2 Debian Ubuntu Alpine