Security Vulnerabilities - CVEs Published In August 2019
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-02
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-02
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-02
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-02
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences.
CVSS Score
7.5
EPSS Score
0.045
Published
2019-08-02
An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out of bounds read on iso9660 while parsing System Use Sharing Protocol data in fs/iso9660.c.
CVSS Score
9.8
EPSS Score
0.004
Published
2019-08-02
An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table.
CVSS Score
9.8
EPSS Score
0.006
Published
2019-08-02
Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information to an unauthenticated attacker. A successful attack requires that multiple non-default options be enabled.
CVSS Score
7.5
EPSS Score
0.005
Published
2019-08-02
Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers.
CVSS Score
7.5
EPSS Score
0.007
Published
2019-08-02
A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perform a CSRF attack.
CVSS Score
4.2
EPSS Score
0.001
Published
2019-08-02