Skip to content
OpenAdvisories

Archive

8 October 2019

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 5.4

    Cross-site Scripting in node-red-dashboard

    It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.

  • Medium 6.1

    Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. A…

  • Medium 5.7

    A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container imag…

  • Medium 6.5

    Centreon Sensitive Data Exposure

    In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components.