Archive
8 October 2019
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Medium 5.4
Cross-site Scripting in node-red-dashboard
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
-
Medium 6.1
Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. A…
-
Medium 5.7
A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container imag…
-
Medium 6.5
Centreon Sensitive Data Exposure
In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components.