CVEs published November 28, 2019
10 CVEs were published on November 28, 2019: 0 critical, 1 high.
- Published
- 10
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 0
High 1
Medium, low and unrated 9
- CVE-2019-19384A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web sc
- CVE-2019-19385A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web
- CVE-2019-19386A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackers
- CVE-2019-19387A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitr
- CVE-2019-19388A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject ar
- CVE-2019-19379In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.
- CVE-2019-19376In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses inp
- CVE-2019-19375In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secur
- CVE-2019-19372A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders a