CVE Vulnerability

CWE-79

CVE-2019-16145

by

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption.

CVE-2019-16146

by

Gophish through 0.8.0 allows XSS via a username.

CVE-2019-16147

by

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.

CVE-2019-16148

by

Sakai through 12.6 allows XSS via a chat user name.

CVE-2019-16068

by

A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious manage_files.cgi request. This can be triggered via XSS or an IFRAME tag included within the site.

CVE-2019-16069

by

A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through the SNMP protocol.