Skip to content
OpenAdvisories

Archive

12 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /12 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

47 results · Feed

  • Unscored —
    CVE-2019-14359

    On BC Vault devices, a side channel for the row-based SSD1309 OLED display was found. The power consumption of each row…

  • Unscored —
    CVE-2019-14982

    In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpi…

  • Unscored —
    CVE-2019-14981

    In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftIm…

    imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-14980

    In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob f…

    imagemagick imagemagick6 Alpine
  • Unscored —
    CVE-2019-13418

    Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.

    floragunn Search Guard
  • Unscored —
    CVE-2019-14976

    iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.

  • Unscored —
    CVE-2019-13417

    Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fi…

    floragunn Search Guard
  • Unscored —
    CVE-2019-14969

    Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-fold…

  • Unscored —
    CVE-2019-14968

    An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action.

  • Unscored —
    CVE-2019-14965

    An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection (SSTI) issue …

  • Unscored —
    CVE-2019-14966

    An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection.

  • Unscored —
    CVE-2019-14967

    An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.

  • Critical 9.8
    CVE-2019-12618

    Hashicorp Nomad Access Control Issues

    HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Unscored —
    CVE-2019-13462 Scanner template EPSS 11%

    Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.

  • Unscored —
    CVE-2017-18499

    The simple-membership plugin before 3.5.7 for WordPress has XSS.

  • Unscored —
    CVE-2015-9303

    The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.

  • Unscored —
    CVE-2017-18500 Scanner template

    The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18501 Scanner template

    The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18502 Scanner template

    The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18503

    The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.

  • Unscored —
    CVE-2017-18504

    The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18505 Scanner template

    The twitter-plugin plugin before 2.55 for WordPress has XSS.

  • Unscored —
    CVE-2019-14945

    The ultimate-member plugin before 2.0.54 for WordPress has XSS.

  • Unscored —
    CVE-2019-14946

    The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations.

  • Unscored —
    CVE-2019-14947

    The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.

  • Unscored —
    CVE-2018-20965

    The ultimate-member plugin before 2.0.4 for WordPress has XSS.

  • Unscored —
    CVE-2016-10872

    The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.

  • Unscored —
    CVE-2015-9304

    The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.

  • Unscored —
    CVE-2018-20966 Public exploit

    The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature.

  • Unscored —
    CVE-2019-14951

    The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechani…

  • Unscored —
    CVE-2017-18506

    The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable o…

  • Unscored —
    CVE-2019-14948

    The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

  • Unscored —
    CVE-2019-14949

    The wp-database-backup plugin before 5.1.2 for WordPress has XSS.

  • Unscored —
    CVE-2016-10873

    The wp-database-backup plugin before 4.3.3 for WordPress has XSS.

  • Unscored —
    CVE-2016-10874

    The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.

  • Unscored —
    CVE-2016-10875

    The wp-database-backup plugin before 4.3.1 for WordPress has XSS.

  • Unscored —
    CVE-2016-10876

    The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.

  • Unscored —
    CVE-2016-10877

    The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2016-10878

    The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.

  • Unscored —
    CVE-2015-9305

    The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg(…