Skip to content
OpenAdvisories

Archive

26 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /26 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-12562 Public exploit

    Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke

    Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing conten…

    DotNetNuke.Core NuGet
  • Medium 5.5
    CVE-2019-10882

    Netskope client buffer overflow vulnerability

    The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHands…

    Netskope Netskope Client
  • Medium 5.3
    CVE-2019-4378

    IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.…

    IBM MQ
  • Medium 5.3
    CVE-2019-4262

    IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated atta…

    IBM QRadar SIEM
  • Medium 5.3
    CVE-2019-16409

    SilverStripe Versioned Files module Unpublished files are exposed publicly

    In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This guess could be highly informed by a basic understanding of the symbiote/silverstripe-versionedfiles so…

    silverstripe/framework symbiote/silverstripe-versionedfiles Packagist
  • Medium 5.4
    CVE-2019-14272

    SilverStripe asset-admin Cross-site Scripting (XSS)

    In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.

    silverstripe/framework Packagist
  • Medium 5.3
    CVE-2019-14273

    Broken access control on files

    In SilverStripe assets 4.0, there is broken access control on files.

    silverstripe/framework Packagist
  • Medium 5.4
    CVE-2019-16904

    TeamPass Cross-site Scripting (XSS) vulnerability

    TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the change history of the item or tapping on the item.)

    nilsteampassnet/teampass Packagist
  • Medium 5.3
    CVE-2019-16738

    MediaWiki information disclosure

    In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist