Skip to content
OpenAdvisories

Archive

9 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /9 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Unscored —
    CVE-2019-14794

    The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders.

  • Unscored —
    CVE-2019-14791

    The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea par…

  • Unscored —
    CVE-2019-14796

    The mq-woocommerce-products-price-bulk-edit (aka Woocommerce Products Price Bulk Edit) plugin 2.0 for WordPress allows …

  • Unscored —
    CVE-2019-14797

    The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS.

  • Unscored —
    CVE-2019-14798

    The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory travers…

  • Unscored —
    CVE-2019-14801

    The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.

  • Unscored —
    CVE-2019-14785

    The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/…

  • Unscored —
    CVE-2016-10865

    The Lightbox Plus Colorbox plugin through 2.7.2 for WordPress has cross-site request forgery (CSRF) via wp-admin/admin.…

  • Unscored —
    CVE-2019-14312 Public exploit Scanner template EPSS 21%

    Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This …

  • Unscored —
    CVE-2019-14787

    The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newslett…

  • Unscored —
    CVE-2019-14799

    The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.

  • Critical 9.8
    CVE-2019-14234 Public exploit EPSS 48%

    SQL Injection in Django

    An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to an error in shallow key transformation, key and index lookups for django.contrib.postgres.fields.JSONField, and key lookups for django.contrib.postgre…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2019-14793 Scanner template

    The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=…

  • Unscored —
    CVE-2019-14792

    The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity…