CVEs published September 21, 2019
17 CVEs were published on September 21, 2019: 0 critical, 0 high.
- Published
- 17
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- pagekit/pagekit
- 1
Medium, low and unrated 17
- CVE-2019-16681The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitr
- CVE-2019-16680An issue was discovered in GNOME file-roller before 3.29.91.
- CVE-2019-16679Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.
- CVE-2019-16677An issue was discovered in idreamsoft iCMS V7.0.
- CVE-2019-16678admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.
- CVE-2019-16669The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is epagekit/pagekit
- CVE-2019-16664An issue was discovered in ThinkSAAS 2.91.
- CVE-2019-16665An issue was discovered in ThinkSAAS 2.91.
- CVE-2019-16655joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.
- CVE-2019-16656joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the dat
- CVE-2019-16657TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.
- CVE-2019-16658TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.
- CVE-2019-16659TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.
- CVE-2019-16660joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF.
- CVE-2019-16661Ogma CMS 0.5 has XSS via creation of a new blog.
- CVE-2019-16649On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service
- CVE-2019-16650On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket fil