CVEs published October 13, 2019
6 CVEs were published on October 13, 2019: 2 critical, 0 high.
- Published
- 6
- Critical
- 2
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Critical 2
- CVE-2019-17536Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php.
- CVE-2019-17535Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CV
Medium, low and unrated 4
- CVE-2019-17537Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substr
- CVE-2019-17538Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring
- CVE-2019-17533Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf wh
- CVE-2019-17534vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, le