CVEs published October 5, 2019
8 CVEs were published on October 5, 2019: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- nilsteampassnet/teampass
- 3
- rediswrapper
- 1
Medium, low and unrated 8
- CVE-2019-17206Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) before 0.3.0 allows attackers trediswrapper
- CVE-2019-17203TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder.nilsteampassnet/teampass
- CVE-2019-17204TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item.nilsteampassnet/teampass
- CVE-2019-17205TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt.nilsteampassnet/teampass
- CVE-2019-17199www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regula
- CVE-2019-17197OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinical_rules.php that affects library/pati
- CVE-2019-17191The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user inter
- CVE-2019-17192The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a