Skip to content
OpenAdvisories

Archive

5 February 2020

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.1

    bbPress Cross-site Scripting (XSS) vulnerability

    bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.

  • Medium 4.8

    Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected device. The vulnerability is due to insuf…

  • Medium 5.4
    CVE-2019-15253 Public exploit

    Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface o…

  • Medium 6.5

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information c…

  • Medium 4.3

    IBM Cloud Automation Manager 3.2.1.0 does not set the secure attribute on authorization tokens or session cookies. Atta…

  • Medium 4.3

    IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio…