Archive
September 2019
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Medium 6.1
Cross-site Scripting in YII2-CMS
YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.
-
Unscored —
framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file fr…
-
Unscored —
An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary …
-
Unscored —
An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwo…
-
Unscored —CVE-2019-16124 EPSS 28%
In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to…
-
Unscored —
In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL inje…
-
Medium 6.1
Cross-site Scripting in Grav
Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.
-
Unscored —
In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File …
-
Unscored —
sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
-
Critical 9.8
Use-after-free in chttp
An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion.
-
Unscored —CVE-2019-16117 Public exploit
Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via adm…
-
Unscored —CVE-2019-16118 Public exploit
Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via adm…
-
Unscored —
SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/contro…
-
Unscored —
CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticke…
-
Unscored —
In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used…
-
Unscored —
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .…
-
Medium 5.3
Authentication Bypass in Devise
An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmation_token, if a database record has a blank value in the confirmation_token column. (However, there is no scenario within Devise …
-
Unscored —
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.
-
Unscored —
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client…
-
Unscored —
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by s…
-
Unscored —
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity.
-
Unscored —
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root B…
-
Unscored —
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO.
-
Unscored —
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI.
-
Medium 6.5
Missing Authorization in Harbor
core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.6 v1.8.3. v.1.9.0. W…
-
Unscored —
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.
-
Unscored —
Kilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation involving the number …
-
Unscored —
Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.
-
Unscored —
Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.
-
Unscored —
Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
-
Unscored —
Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
-
Unscored —
Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.
-
Unscored —
An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the n…
-
Unscored —
In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to…
-
Unscored —
In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. Thi…
-
Unscored —
In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —
In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds c…
-
Unscored —
In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This c…
-
Unscored —
In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This cou…