| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-15526 | Hig | 0.58 | 8.8 | 0.04 | Aug 23, 2019 | An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings, a related issue to CVE-2019-13482. | ||
| CVE-2019-13014 | Med | 0.36 | 5.5 | 0.00 | Aug 23, 2019 | Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version… | ||
| CVE-2019-13013 | Med | 0.36 | 5.5 | 0.00 | Aug 23, 2019 | Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root. | ||
| CVE-2019-10751 | Hig | 0.57 | 8.8 | 0.02 | Aug 23, 2019 | All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in… | ||
| CVE-2019-10750 | Cri | 0.64 | 9.8 | 0.02 | Aug 23, 2019 | deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload. | ||
| CVE-2019-10747 | Cri | 0.57 | 9.8 | 0.02 | Aug 23, 2019 | set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and _proto_ payloads. | ||
| CVE-2019-10746 | Cri | 0.57 | 9.8 | 0.04 | Aug 23, 2019 | mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload. | ||
| CVE-2019-15525 | Hig | 0.53 | 8.1 | 0.01 | Aug 23, 2019 | There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1. | ||
| CVE-2019-15520 | Med | 0.35 | 5.3 | 0.02 | Aug 23, 2019 | comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory. | ||
| CVE-2019-15519 | Cri | 0.64 | 9.8 | 0.03 | Aug 23, 2019 | Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin. | ||
| CVE-2019-15518 | Med | 0.35 | 5.3 | 0.02 | Aug 23, 2019 | Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler. | ||
| CVE-2019-15517 | — | Med | 0.36 | 5.5 | 0.01 | Aug 23, 2019 | jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. | |
| CVE-2019-15516 | Hig | 0.49 | 7.5 | 0.02 | Aug 23, 2019 | Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring. | ||
| CVE-2019-8447 | Med | 0.28 | 4.3 | 0.01 | Aug 23, 2019 | The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability. | ||
| CVE-2019-8446 | Med | 0.36 | 5.3 | 0.18 | Aug 23, 2019 | The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check. | ||
| CVE-2019-8445 | Med | 0.35 | 5.3 | 0.03 | Aug 23, 2019 | Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time information via a missing permissions check. | ||
| CVE-2019-8444 | Med | 0.35 | 5.4 | 0.01 | Aug 23, 2019 | The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in image attribute specification. | ||
| CVE-2019-14999 | Med | 0.28 | 4.3 | 0.01 | Aug 23, 2019 | The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery (CSRF) vulnerability on… | ||
| CVE-2019-13423 | Hig | 0.57 | 8.8 | 0.01 | Aug 23, 2019 | Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a) Kibana is configured to use… | ||
| CVE-2019-13422 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login. | ||
| CVE-2019-13421 | Med | 0.32 | 4.9 | 0.01 | Aug 23, 2019 | Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database. | ||
| CVE-2019-11589 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to obtain a user's Cross-site request forgery (CSRF) token, via… | ||
| CVE-2019-11588 | Med | 0.28 | 4.3 | 0.01 | Aug 23, 2019 | The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to trigger garbage collection via a Cross-site request forgery (CSRF) vulnerability. | ||
| CVE-2019-11587 | Med | 0.42 | 6.5 | 0.01 | Aug 23, 2019 | Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery (CSRF). | ||
| CVE-2019-11586 | Med | 0.28 | 4.3 | 0.01 | Aug 23, 2019 | The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability. | ||
| CVE-2019-11585 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open… | ||
| CVE-2019-11584 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the priority icon url of an issue priority. | ||
| CVE-2019-15514 | Med | 0.35 | 5.3 | 0.02 | Aug 23, 2019 | The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned… | ||
| CVE-2019-15494 | Cri | 0.64 | 9.8 | 0.02 | Aug 23, 2019 | openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. | ||
| CVE-2019-15493 | Hig | 0.49 | 7.5 | 0.01 | Aug 23, 2019 | openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. | ||
| CVE-2019-15492 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. | ||
| CVE-2019-15491 | Hig | 0.57 | 8.8 | 0.01 | Aug 23, 2019 | openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. | ||
| CVE-2019-15490 | Cri | 0.64 | 9.8 | 0.02 | Aug 23, 2019 | openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. | ||
| CVE-2019-15488 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. | ||
| CVE-2019-15487 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | DfE School Experience before v16333-GA has XSS via a teacher training URL. | ||
| CVE-2019-15486 | Med | 0.33 | 6.1 | 0.01 | Aug 23, 2019 | django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline. | ||
| CVE-2019-15485 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. | ||
| CVE-2019-15484 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | Bolt before 3.6.10 has XSS via an image's alt or title field. | ||
| CVE-2019-15483 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | Bolt before 3.6.10 has XSS via a title that is mishandled in the system log. | ||
| CVE-2019-15482 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | selectize-plugin-a11y before 1.1.0 has XSS via the msg field. | ||
| CVE-2019-15481 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | Kimai v2 before 1.1 has XSS via a timesheet description. | ||
| CVE-2019-15480 | Med | 0.35 | 5.4 | 0.01 | Aug 23, 2019 | Domoticz 4.10717 has XSS via item.Name. | ||
| CVE-2019-15477 | Med | 0.33 | 6.1 | 0.01 | Aug 23, 2019 | Jooby before 1.6.4 has XSS via the default error handler. | ||
| CVE-2019-15476 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | Former before 4.2.1 has XSS via a checkbox value. | ||
| CVE-2019-15513 | Hig | 0.49 | 7.5 | 0.02 | Aug 23, 2019 | An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a… | ||
| CVE-2019-15508 | Med | 0.42 | 6.5 | 0.01 | Aug 23, 2019 | In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is… | ||
| CVE-2019-15507 | Med | 0.42 | 6.5 | 0.01 | Aug 23, 2019 | In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certain limited special-characters circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is… | ||
| CVE-2019-15505 | Cri | 0.64 | 9.8 | 0.08 | Aug 23, 2019 | drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir). | ||
| CVE-2019-15504 | Cri | 0.64 | 9.8 | 0.04 | Aug 23, 2019 | drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir). | ||
| CVE-2019-15499 | Med | 0.40 | 6.1 | 0.01 | Aug 23, 2019 | CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL. |
- risk 0.58cvss 8.8epss 0.04
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings, a related issue to CVE-2019-13482.
- risk 0.36cvss 5.5epss 0.00
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version…
- risk 0.36cvss 5.5epss 0.00
Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root.
- risk 0.57cvss 8.8epss 0.02
All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in…
- risk 0.64cvss 9.8epss 0.02
deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.
- risk 0.57cvss 9.8epss 0.02
set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and _proto_ payloads.
- risk 0.57cvss 9.8epss 0.04
mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
- risk 0.53cvss 8.1epss 0.01
There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1.
- risk 0.35cvss 5.3epss 0.02
comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory.
- risk 0.64cvss 9.8epss 0.03
Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin.
- risk 0.35cvss 5.3epss 0.02
Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.
- risk 0.36cvss 5.5epss 0.01
jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal.
- risk 0.49cvss 7.5epss 0.02
Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring.
- risk 0.28cvss 4.3epss 0.01
The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability.
- risk 0.36cvss 5.3epss 0.18
The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check.
- risk 0.35cvss 5.3epss 0.03
Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time information via a missing permissions check.
- risk 0.35cvss 5.4epss 0.01
The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in image attribute specification.
- risk 0.28cvss 4.3epss 0.01
The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery (CSRF) vulnerability on…
- risk 0.57cvss 8.8epss 0.01
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a) Kibana is configured to use…
- risk 0.40cvss 6.1epss 0.01
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login.
- risk 0.32cvss 4.9epss 0.01
Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database.
- risk 0.40cvss 6.1epss 0.01
The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to obtain a user's Cross-site request forgery (CSRF) token, via…
- risk 0.28cvss 4.3epss 0.01
The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to trigger garbage collection via a Cross-site request forgery (CSRF) vulnerability.
- risk 0.42cvss 6.5epss 0.01
Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery (CSRF).
- risk 0.28cvss 4.3epss 0.01
The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability.
- risk 0.40cvss 6.1epss 0.01
The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open…
- risk 0.40cvss 6.1epss 0.01
The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the priority icon url of an issue priority.
- risk 0.35cvss 5.3epss 0.02
The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned…
- risk 0.64cvss 9.8epss 0.02
openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21.
- risk 0.49cvss 7.5epss 0.01
openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21.
- risk 0.40cvss 6.1epss 0.01
openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21.
- risk 0.57cvss 8.8epss 0.01
openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21.
- risk 0.64cvss 9.8epss 0.02
openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21.
- risk 0.40cvss 6.1epss 0.01
Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.
- risk 0.40cvss 6.1epss 0.01
DfE School Experience before v16333-GA has XSS via a teacher training URL.
- risk 0.33cvss 6.1epss 0.01
django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline.
- risk 0.40cvss 6.1epss 0.01
Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.
- risk 0.40cvss 6.1epss 0.01
Bolt before 3.6.10 has XSS via an image's alt or title field.
- risk 0.40cvss 6.1epss 0.01
Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.
- risk 0.40cvss 6.1epss 0.01
selectize-plugin-a11y before 1.1.0 has XSS via the msg field.
- risk 0.40cvss 6.1epss 0.01
Kimai v2 before 1.1 has XSS via a timesheet description.
- risk 0.35cvss 5.4epss 0.01
Domoticz 4.10717 has XSS via item.Name.
- risk 0.33cvss 6.1epss 0.01
Jooby before 1.6.4 has XSS via the default error handler.
- risk 0.40cvss 6.1epss 0.01
Former before 4.2.1 has XSS via a checkbox value.
- risk 0.49cvss 7.5epss 0.02
An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a…
- risk 0.42cvss 6.5epss 0.01
In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is…
- risk 0.42cvss 6.5epss 0.01
In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certain limited special-characters circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is…
- risk 0.64cvss 9.8epss 0.08
drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
- risk 0.64cvss 9.8epss 0.04
drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).
- risk 0.40cvss 6.1epss 0.01
CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.