CVE Vulnerability

CWE-79

CVE-2019-19497

by

MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.

CVE-2019-19500

by

Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment field of a special order for individual software.

CVE-2019-19514

by

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID.

CVE-2019-19515

by

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings.

CVE-2019-19453

by

Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5.

CVE-2019-19456

by

A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.