| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-14722 | Med | 0.28 | 4.3 | 0.02 | Sep 10, 2019 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete an e-mail forwarding destination from a victim's account via an attacker account. | ||
| CVE-2019-14721 | Med | 0.42 | 6.5 | 0.02 | Sep 10, 2019 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an attacker account. | ||
| CVE-2019-12401 | Hig | 0.49 | 7.5 | 0.09 | Sep 10, 2019 | Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the… | ||
| CVE-2019-16202 | Med | 0.35 | 6.5 | 0.01 | Sep 10, 2019 | MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP… | ||
| CVE-2017-18611 | Med | 0.33 | 6.1 | 0.01 | Sep 10, 2019 | The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter. | ||
| CVE-2017-18610 | Med | 0.33 | 6.1 | 0.01 | Sep 10, 2019 | The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter. | ||
| CVE-2017-18609 | Med | 0.33 | 6.1 | 0.01 | Sep 10, 2019 | The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter. | ||
| CVE-2017-18608 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues. | ||
| CVE-2017-18607 | Hig | 0.57 | 8.8 | 0.01 | Sep 10, 2019 | The avada theme before 5.1.5 for WordPress has CSRF. | ||
| CVE-2017-18606 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | The avada theme before 5.1.5 for WordPress has stored XSS. | ||
| CVE-2017-18605 | Cri | 0.64 | 9.8 | 0.02 | Sep 10, 2019 | The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection. | ||
| CVE-2017-18604 | Hig | 0.49 | 7.5 | 0.02 | Sep 10, 2019 | The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request. | ||
| CVE-2017-18603 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter. | ||
| CVE-2017-18602 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2019 | The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp_UserResult id parameter. | ||
| CVE-2017-18601 | Med | 0.35 | 5.4 | 0.01 | Sep 10, 2019 | The examapp plugin 1.0 for WordPress has XSS via exam input text fields. | ||
| CVE-2017-18600 | Med | 0.35 | 5.4 | 0.01 | Sep 10, 2019 | The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field. | ||
| CVE-2017-18599 | Med | 0.40 | 6.1 | 0.01 | Sep 10, 2019 | The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter. | ||
| CVE-2017-18598 | Med | 0.40 | 6.1 | 0.02 | Sep 10, 2019 | The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php. | ||
| CVE-2017-18597 | Hig | 0.57 | 8.8 | 0.02 | Sep 10, 2019 | The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter. | ||
| CVE-2017-18596 | Hig | 0.57 | 8.8 | 0.01 | Sep 10, 2019 | The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions. | ||
| CVE-2019-7176 | Low | 0.17 | 3.7 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they… | ||
| CVE-2019-6791 | Med | 0.35 | 6.5 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 3 of 3). When a project with visibility more permissive than the target group is imported, it will retain its… | ||
| CVE-2019-16192 | Cri | 0.64 | 9.8 | 0.02 | Sep 9, 2019 | upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive. | ||
| CVE-2019-16187 | Hig | 0.42 | 7.5 | 0.01 | Sep 9, 2019 | Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script. | ||
| CVE-2019-16186 | Hig | 0.40 | 7.2 | 0.01 | Sep 9, 2019 | In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions. | ||
| CVE-2019-16185 | Hig | 0.40 | 7.2 | 0.01 | Sep 9, 2019 | In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions. | ||
| CVE-2019-16184 | Cri | 0.57 | 9.8 | 0.02 | Sep 9, 2019 | A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file. | ||
| CVE-2019-16183 | Low | 0.11 | 2.7 | 0.01 | Sep 9, 2019 | In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions. | ||
| CVE-2019-16182 | Med | 0.33 | 6.1 | 0.01 | Sep 9, 2019 | A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitrary web script or HTML via extensions of uploaded files. | ||
| CVE-2019-16181 | Low | 0.11 | 2.7 | 0.01 | Sep 9, 2019 | In Limesurvey before 3.17.14, admin users can mark other users' notifications as read. | ||
| CVE-2019-16180 | Med | 0.28 | 5.3 | 0.02 | Sep 9, 2019 | Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used. | ||
| CVE-2019-16179 | Med | 0.28 | 5.3 | 0.01 | Sep 9, 2019 | Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration. | ||
| CVE-2019-16178 | Med | 0.28 | 5.4 | 0.01 | Sep 9, 2019 | A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page. | ||
| CVE-2019-16177 | Hig | 0.42 | 7.5 | 0.01 | Sep 9, 2019 | In Limesurvey before 3.17.14, the entire database is exposed through browser caching. | ||
| CVE-2019-16176 | Med | 0.28 | 5.3 | 0.02 | Sep 9, 2019 | A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the path to the application in the filesystem. | ||
| CVE-2019-16175 | Med | 0.28 | 4.3 | 0.01 | Sep 9, 2019 | A clickjacking vulnerability was found in Limesurvey before 3.17.14. | ||
| CVE-2019-16174 | Hig | 0.50 | 8.8 | 0.02 | Sep 9, 2019 | An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity. | ||
| CVE-2019-16147 | Med | 0.33 | 6.1 | 0.01 | Sep 9, 2019 | Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib. | ||
| CVE-2019-16145 | Med | 0.33 | 6.1 | 0.01 | Sep 9, 2019 | The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption. | ||
| CVE-2019-15297 | Med | 0.43 | 6.5 | 0.03 | Sep 9, 2019 | res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs because of a NULL session media object dereference. | ||
| CVE-2019-10253 | Med | 0.42 | 6.5 | 0.01 | Sep 9, 2019 | A Cross-Site Request Forgery (CSRF) vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data (upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files). The specific flaw exists… | ||
| CVE-2019-6997 | Med | 0.21 | 4.3 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting in 10.7) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. System notes contain an access control issue that permits a guest user to view… | ||
| CVE-2019-6996 | Med | 0.21 | 4.3 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. The merge request approvers section has an access control issue that permits project maintainers… | ||
| CVE-2019-6995 | Med | 0.35 | 6.5 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Users are able to comment on locked project issues. | ||
| CVE-2019-6960 | Cri | 0.57 | 9.8 | 0.02 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Access to the internal wiki is permitted when an external wiki service is enabled. | ||
| CVE-2019-6795 | Med | 0.28 | 5.4 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be… | ||
| CVE-2019-6794 | Med | 0.21 | 4.3 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 5 of 6). A project guest user can view the last commit status of the default branch. | ||
| CVE-2019-6793 | Hig | 0.39 | 7.0 | 0.04 | Sep 9, 2019 | An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue. | ||
| CVE-2019-6792 | Med | 0.28 | 5.3 | 0.02 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disclosure. When an error is encountered on project import, the error message will display instance internal information. | ||
| CVE-2019-6789 | Med | 0.21 | 4.3 | 0.01 | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 4 of 6). In some cases, users without project permissions will receive emails after a project move. For… |
- risk 0.28cvss 4.3epss 0.02
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete an e-mail forwarding destination from a victim's account via an attacker account.
- risk 0.42cvss 6.5epss 0.02
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an attacker account.
- risk 0.49cvss 7.5epss 0.09
Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the…
- risk 0.35cvss 6.5epss 0.01
MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP…
- risk 0.33cvss 6.1epss 0.01
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.
- risk 0.33cvss 6.1epss 0.01
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.
- risk 0.33cvss 6.1epss 0.01
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.
- risk 0.40cvss 6.1epss 0.01
The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues.
- risk 0.57cvss 8.8epss 0.01
The avada theme before 5.1.5 for WordPress has CSRF.
- risk 0.40cvss 6.1epss 0.01
The avada theme before 5.1.5 for WordPress has stored XSS.
- risk 0.64cvss 9.8epss 0.02
The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection.
- risk 0.49cvss 7.5epss 0.02
The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.
- risk 0.40cvss 6.1epss 0.01
The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter.
- risk 0.57cvss 8.8epss 0.02
The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp_UserResult id parameter.
- risk 0.35cvss 5.4epss 0.01
The examapp plugin 1.0 for WordPress has XSS via exam input text fields.
- risk 0.35cvss 5.4epss 0.01
The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field.
- risk 0.40cvss 6.1epss 0.01
The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter.
- risk 0.40cvss 6.1epss 0.02
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.
- risk 0.57cvss 8.8epss 0.02
The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter.
- risk 0.57cvss 8.8epss 0.01
The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.
- risk 0.17cvss 3.7epss 0.01
An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they…
- risk 0.35cvss 6.5epss 0.01
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 3 of 3). When a project with visibility more permissive than the target group is imported, it will retain its…
- risk 0.64cvss 9.8epss 0.02
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.
- risk 0.42cvss 7.5epss 0.01
Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script.
- risk 0.40cvss 7.2epss 0.01
In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.
- risk 0.40cvss 7.2epss 0.01
In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions.
- risk 0.57cvss 9.8epss 0.02
A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file.
- risk 0.11cvss 2.7epss 0.01
In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions.
- risk 0.33cvss 6.1epss 0.01
A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitrary web script or HTML via extensions of uploaded files.
- risk 0.11cvss 2.7epss 0.01
In Limesurvey before 3.17.14, admin users can mark other users' notifications as read.
- risk 0.28cvss 5.3epss 0.02
Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used.
- risk 0.28cvss 5.3epss 0.01
Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration.
- risk 0.28cvss 5.4epss 0.01
A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page.
- risk 0.42cvss 7.5epss 0.01
In Limesurvey before 3.17.14, the entire database is exposed through browser caching.
- risk 0.28cvss 5.3epss 0.02
A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the path to the application in the filesystem.
- risk 0.28cvss 4.3epss 0.01
A clickjacking vulnerability was found in Limesurvey before 3.17.14.
- risk 0.50cvss 8.8epss 0.02
An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity.
- risk 0.33cvss 6.1epss 0.01
Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.
- risk 0.33cvss 6.1epss 0.01
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption.
- risk 0.43cvss 6.5epss 0.03
res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs because of a NULL session media object dereference.
- risk 0.42cvss 6.5epss 0.01
A Cross-Site Request Forgery (CSRF) vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data (upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files). The specific flaw exists…
- risk 0.21cvss 4.3epss 0.01
An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting in 10.7) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. System notes contain an access control issue that permits a guest user to view…
- risk 0.21cvss 4.3epss 0.01
An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. The merge request approvers section has an access control issue that permits project maintainers…
- risk 0.35cvss 6.5epss 0.01
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Users are able to comment on locked project issues.
- risk 0.57cvss 9.8epss 0.02
An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Access to the internal wiki is permitted when an external wiki service is enabled.
- risk 0.28cvss 5.4epss 0.01
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be…
- risk 0.21cvss 4.3epss 0.01
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 5 of 6). A project guest user can view the last commit status of the default branch.
- risk 0.39cvss 7.0epss 0.04
An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue.
- risk 0.28cvss 5.3epss 0.02
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disclosure. When an error is encountered on project import, the error message will display instance internal information.
- risk 0.21cvss 4.3epss 0.01
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 4 of 6). In some cases, users without project permissions will receive emails after a project move. For…