OMERO before 5.6.1 makes the details of each user available to all users.
View Full Alert
Related Posts
CVE-2019-13285CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection. View Full Alert
CVE-2019-19109The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF. View Full Alert
CVE-2019-17230includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. View Full Alert