CVE-2019-11084

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

GAuth 0.9.9 beta has stored XSS that shows a popup repeatedly and discloses cookies.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 18, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-110857.8Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user tCVE-2019-110866.8Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable eCVE-2019-110876.7Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; CVE-2019-110888.8Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticaCVE-2019-110895.5Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated usCVE-2019-11099.1A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office docuCVE-2019-110905.9Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; CVE-2019-110915.6Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may CVE-2019-110924.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-110936.7Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated userCVE-2019-110947.8Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of pCVE-2019-110954.4Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially e
CVE-2019-11084: Medium severity, CVSS 6.1 | Vulnix