Skip to content
OpenAdvisories

Archive

22 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /22 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2019-16973

    In FusionPBX up to 4.5.7, the file app\contacts\contact_edit.php uses an unsanitized "query_string" variable coming fro…

  • Unscored —
    CVE-2019-16972

    In FusionPBX up to 4.5.7, the file app\contacts\contact_addresses.php uses an unsanitized "id" variable coming from the…

  • Unscored —
    CVE-2019-16971

    In FusionPBX up to 4.5.7, the file app\messages\messages_thread.php uses an unsanitized "contact_uuid" variable coming …

  • Unscored —
    CVE-2015-9501

    The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily pl…

  • Unscored —
    CVE-2015-9500

    The Exquisite Ultimate Newspaper theme 1.3.3 for WordPress has XSS via the anchor identifier to assets/js/jquery.founda…

  • Unscored —
    CVE-2019-8089

    Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploit…

    Adobe Adobe Experience Manager Forms
  • Unscored —
    CVE-2015-9499 Scanner template EPSS 16%

    The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.

  • Unscored —
    CVE-2015-9498

    The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.

  • Unscored —
    CVE-2015-9497

    The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-…

  • Unscored —
    CVE-2015-9496

    The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substrin…

  • Medium 5.4
    CVE-2019-15587

    Loofah Allows Cross-site Scripting

    In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

    loofah ruby-loofah ruby-loofah Debian Ubuntu RubyGems
  • Unscored —
    CVE-2015-9495

    The syndication-links plugin before 1.0.3 for WordPress has XSS via the genericons/example.html anchor identifier.

  • Unscored —
    CVE-2015-9494

    The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier.

  • Unscored —
    CVE-2015-9493

    The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-8087

    Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows …

  • Unscored —
    CVE-2019-12147

    The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special…

  • Unscored —
    CVE-2019-10079

    Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache Traffic Server didn't l…

    trafficserver trafficserver Debian Ubuntu
  • Unscored —
    CVE-2019-12148

    The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via a…

  • Unscored —
    CVE-2019-12290

    GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-label…

    libidn2-0 libidn2 libidn2 libidn2 Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-12967

    Stephan Mooltipass Moolticute through 0.42.1 (and possibly earlier versions) has Incorrect Access Control.

  • Unscored —
    CVE-2019-11674

    Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. Th…

  • Unscored —
    CVE-2019-17189

    totemodata 3.0.0_b936 has XSS via a folder name.

  • High 8.4
    CVE-2019-4523

    IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds …

    IBM DB2 High Performance Unload load for LUW
  • Unscored —
    CVE-2019-17424 Public exploit EPSS 13%

    A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows r…