2019-11-16

2019-11-17

2019-11-18

All (2) Critical (1) High (3) Medium (2)

CVE-2019-19040 Nov 17, 21:15 MEDIUM POC PATCH This Month

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>' substring. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Kairosdb

NVD GitHub

CVSS 3.1

6.1

EPSS

0.9%

CVE-2019-19035 Nov 17, 18:15 MEDIUM POC This Month

jhead 3.03 is affected by: heap-based buffer over-read. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Jhead Jhead Project

NVD

CVSS 3.1

5.5

EPSS

1.0%