SailPoint Buys Orkus and OverWatchID to Strengthen Cloud Access Governance

Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database CVE-2019-17660PUBLISHED: 2019-10-16

A cross-site scripting (XSS) vulnerability in admin/translate/translateheader_view.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang parameter, as demonstrated by the index.php/admin/translate/sa/index/surveyid/336819/lang/ PATH_INFO.

CVE-2019-11281PUBLISHED: 2019-10-16

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input...

CVE-2019-16521PUBLISHED: 2019-10-16

The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS payl...

CVE-2019-16522PUBLISHED: 2019-10-16

The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displayed cookie consent message. This affects Font Color, Background Color, and the Disable Cookie text. A...

CVE-2019-16523PUBLISHED: 2019-10-16

..

Support the originator by clicking the read the rest link below.