Archive
September 2019
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Medium 6.1CVE-2019-16197 Public exploit
Cross-site scripting in Dolibarr
In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.
-
Unscored —
An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x befo…
-
Critical 9.8
The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.
KEV Apr 15, 2022 -
Unscored —
The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
-
Unscored —
The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.
-
Unscored —
TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd,…
-
Critical 9.8
Polymorphic Typing issue in FasterXML jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
-
Critical 9.8
Polymorphic Typing issue in FasterXML jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
-
Unscored —
GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php.
-
Unscored —
In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -> Add New Category -> Name field. NOTE: th…
-
Unscored —CVE-2019-16332 Scanner template
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swag…
-
Unscored —
Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, suc…
-
Unscored —
ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr…
-
Unscored —
In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was address…
-
High 8.8
Pimcore RCE via PHAR upload
In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uploads are not blocked and are reachable within the phar://../../../../../../../../var/www/html/web/var…
-
High 8.8
Pimcore Unrestricted Upload of File with Dangerous Type
In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonstrated by the failure of automatic renaming of .php to .php.txt for long filenames, a different vulnerability than CVE-2…
-
Unscored —
A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetin…
-
Unscored —CVE-2019-16294 Public exploit
SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode c…
-
Unscored —
FlameCMS 3.3.5 has SQL injection in account/login.php via accountName.
-
Unscored —
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.
-
Unscored —
NIUSHOP V1.11 has CSRF via search_info to index.php.
-
Unscored —
s-cms V3.0 has XSS in index.php?type=text via the S_id parameter.
-
Unscored —
ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.
-
Unscored —CVE-2019-16314 EPSS 39%
Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2.
-
Unscored —
In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup…
-
Critical 9.8
JHipster Kotlin using insecure source of randomness `RandomStringUtils` before v1.2.0
A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils). This allows an attacker (if able to obtain their own password rese…
-
Critical 10.0
Command Injection in gitlabhook
NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.
-
High 7.5
Symlink Arbitrary File Overwrite in bower
Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.
-
Unscored —CVE-2019-11660 Public exploit
Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30,…
-
Unscored —
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requ…
-
Unscored —
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requ…
-
Unscored —
A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated u…
-
Unscored —
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XS…
-
Unscored —
A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attack…
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with adminis…
-
Unscored —
A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration…
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no…
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should o…
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web ap…
-
Unscored —
A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to t…