Total
408884 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2019-15492 | 1 It-novum | 1 Openitcockpit | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. | |||||
| CVE-2019-15491 | 1 It-novum | 1 Openitcockpit | 2026-06-17 | 6.8 MEDIUM | 8.8 HIGH |
| openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. | |||||
| CVE-2019-15490 | 1 It-novum | 1 Openitcockpit | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. | |||||
| CVE-2019-15489 | 1 Laracom | 1 Laracom | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS. | |||||
| CVE-2019-15488 | 1 Igniterealtime | 1 Openfire | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. | |||||
| CVE-2019-15487 | 1 Schoolexperience | 1 Department For Education School Experience | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| DfE School Experience before v16333-GA has XSS via a teacher training URL. | |||||
| CVE-2019-15486 | 1 Django Js Reverse Project | 1 Django Js Reserve | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline. | |||||
| CVE-2019-15485 | 1 Boltcms | 1 Bolt | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. | |||||
| CVE-2019-15484 | 1 Boltcms | 1 Bolt | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Bolt before 3.6.10 has XSS via an image's alt or title field. | |||||
| CVE-2019-15483 | 1 Boltcms | 1 Bolt | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Bolt before 3.6.10 has XSS via a title that is mishandled in the system log. | |||||
| CVE-2019-15482 | 1 Selectize-plugin-a11y Project | 1 Selectize-plugin-a11y | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| selectize-plugin-a11y before 1.1.0 has XSS via the msg field. | |||||
| CVE-2019-15481 | 1 Kimai | 1 Kimai 2 | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Kimai v2 before 1.1 has XSS via a timesheet description. | |||||
| CVE-2019-15480 | 1 Domoticz | 1 Domoticz | 2026-06-17 | 3.5 LOW | 5.4 MEDIUM |
| Domoticz 4.10717 has XSS via item.Name. | |||||
| CVE-2019-15479 | 1 Status Board Project | 1 Status Board | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Status Board 1.1.81 has reflected XSS via dashboard.ts. | |||||
| CVE-2019-15478 | 1 Status Board Project | 1 Status Board | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Status Board 1.1.81 has reflected XSS via logic.ts. | |||||
| CVE-2019-15477 | 1 Jooby | 1 Jooby | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Jooby before 1.6.4 has XSS via the default error handler. | |||||
| CVE-2019-15476 | 1 Former Project | 1 Former | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Former before 4.2.1 has XSS via a checkbox value. | |||||
| CVE-2019-15475 | 1 Mi | 2 A3, A3 Firmware | 2026-06-17 | 2.1 LOW | 5.5 MEDIUM |
| The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onc_eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage. | |||||
| CVE-2019-15474 | 1 Mi | 2 Cepheus, Cepheus Firmware | 2026-06-17 | 2.1 LOW | 5.5 MEDIUM |
| The Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage. | |||||
| CVE-2019-15473 | 1 Mi | 2 A2 Lite, A2 Lite Firmware | 2026-06-17 | 2.1 LOW | 5.5 MEDIUM |
| The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine_sprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage. | |||||