Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1246 matches found

NVD
NVD•added 2019/09/17 9:15 p.m.•20 views

CVE-2019-16391

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...

6.5CVSS6.3AI score0.01487EPSS
SaveExploits0References8
NVD
NVD•added 2019/09/17 9:15 p.m.•15 views

CVE-2019-16393

SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character...

6.1CVSS6.2AI score0.011EPSS
SaveExploits0References7
NVD
NVD•added 2019/09/17 9:15 p.m.•15 views

CVE-2019-16392

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

6.1CVSS6AI score0.0116EPSS
SaveExploits0References6
OSV
OSV•added 2019/09/17 9:15 p.m.•4 views

DEBIAN-CVE-2019-16391

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...

6.5CVSS7.2AI score0.01487EPSS
SaveExploits0References1
OSV
OSV•added 2019/09/17 9:15 p.m.•1 views

DEBIAN-CVE-2019-16393

SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character...

6.1CVSS7AI score0.011EPSS
SaveExploits0References1
OSV
OSV•added 2019/09/17 9:15 p.m.•16 views

CVE-2019-16392

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

6.1CVSS5.6AI score
SaveExploits0References6
OSV
OSV•added 2019/09/17 9:15 p.m.•2 views

DEBIAN-CVE-2019-16394

SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers...

5.3CVSS6.7AI score0.06865EPSS
SaveExploits2References1
OSV
OSV•added 2019/09/17 9:15 p.m.•21 views

CVE-2019-16393

SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character...

6.1CVSS6.7AI score
SaveExploits0References7
OSV
OSV•added 2019/09/17 9:15 p.m.•1 views

DEBIAN-CVE-2019-16392

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

6.1CVSS6.8AI score0.0116EPSS
SaveExploits0References1
OSV
OSV•added 2019/09/17 9:15 p.m.•19 views

CVE-2019-16391

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...

6.5CVSS6.5AI score
SaveExploits0References8
UbuntuCve
UbuntuCve•added 2019/09/17 9:15 p.m.•21 views

CVE-2019-16393

SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character...

6.1CVSS6.9AI score0.011EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve•added 2019/09/17 9:15 p.m.•23 views

CVE-2019-16394

SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers...

5.3CVSS6.8AI score0.06865EPSS
SaveExploits2References6
Prion
Prion•added 2019/09/17 9:15 p.m.•13 views

Code injection

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

4.3CVSS6.2AI score0.0116EPSS
SaveExploits0References6Affected Software3
Prion
Prion•added 2019/09/17 9:15 p.m.•25 views

Design/Logic Flaw

SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers...

5CVSS5.6AI score0.06865EPSS
SaveExploits2References8Affected Software3
UbuntuCve
UbuntuCve•added 2019/09/17 9:15 p.m.•28 views

CVE-2019-16391

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...

6.5CVSS7.2AI score0.01487EPSS
SaveExploits0References5
Prion
Prion•added 2019/09/17 9:15 p.m.•18 views

Code injection

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...

4CVSS6.5AI score0.01487EPSS
SaveExploits0References8Affected Software3
UbuntuCve
UbuntuCve•added 2019/09/17 9:15 p.m.•19 views

CVE-2019-16392

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

6.1CVSS6.9AI score0.0116EPSS
SaveExploits0References4
OSV
OSV•added 2019/09/17 9:15 p.m.•3 views

UBUNTU-CVE-2019-16391

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...

6.5CVSS7AI score0.01487EPSS
SaveExploits0References6
OSV
OSV•added 2019/09/17 9:15 p.m.•4 views

UBUNTU-CVE-2019-16394

SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers...

5.3CVSS6.8AI score0.06865EPSS
SaveExploits2References7
Prion
Prion•added 2019/09/17 9:15 p.m.•18 views

Code injection

SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character...

5.8CVSS6.4AI score0.011EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder