cve.nowby Sazabi

CVEs published May 19, 2019

2 CVEs were published on May 19, 2019: 0 critical, 0 high.

Published: 2
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 2
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 2

CVE-2019-12185eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component.UnratedMay 19, 2019
CVE-2019-12184There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart,UnratedMay 19, 2019