CVE-2019-16225

An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation.

Source: CVE-2019-16225

CVE-2019-16221 (wordpress)

WordPress before 5.2.3 allows reflected XSS in the dashboard.

Source: CVE-2019-16221 (wordpress)

CVE-2019-16223 (wordpress)

WordPress before 5.2.3 allows XSS in post previews by authenticated users.

Source: CVE-2019-16223 (wordpress)

CVE-2019-16222 (wordpress)

WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks.

Source: CVE-2019-16222 (wordpress)

CVE-2019-8449

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.

Source: CVE-2019-8449

CVE-2019-8451

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.

Source: CVE-2019-8451

CVE-2019-8450

Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0 allow remote attackers who have permission to manage custom fields to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a custom field.

Source: CVE-2019-8450

CVE-2019-14998

The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via "cookie tossing" a CSRF cookie from a subdomain of a Jira instance.

Source: CVE-2019-14998

CVE-2019-16217

WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.

Source: CVE-2019-16217

CVE-2019-16218

WordPress before 5.2.3 allows XSS in stored comments.

Source: CVE-2019-16218