MCERT

CVE-2019-11444 (liferay_portal)

29th April 2019 - 18:41

An issue was discovered in Liferay Portal CE 7.1.2 GA3. An attacker can use Liferay's Groovy script console to execute OS commands. Commands can be ex... Read more

CVE-2019-11511 (manageengine_adselfservice_plus)

29th April 2019 - 18:41

Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API. Link: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-201... Read more

CVE-2015-1340 (lxd)

29th April 2019 - 16:28

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A s... Read more

CVE-2015-1340 (lxd)

29th April 2019 - 16:28

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A s... Read more

CVE-2019-0186 (pluto)

29th April 2019 - 14:37

The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Unin... Read more