Skip to content
OpenAdvisories

Archive

14 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /14 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

176 results · Feed

  • Unscored —
    CVE-2016-10882

    The google-document-embedder plugin before 2.6.2 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18512

    The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18513

    The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.

  • Unscored —
    CVE-2016-10883

    The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users.

  • Unscored —
    CVE-2013-7476

    The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface.

  • Unscored —
    CVE-2016-10884

    The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.

  • Unscored —
    CVE-2016-10885

    The wp-editor plugin before 1.2.6 for WordPress has CSRF.

  • Unscored —
    CVE-2016-10886

    The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.

  • Unscored —
    CVE-2015-9307

    The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.

  • Unscored —
    CVE-2015-9308

    The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.

  • Unscored —
    CVE-2015-9309

    The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.

  • Unscored —
    CVE-2018-20967

    The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.

  • Unscored —
    CVE-2018-20968

    The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.

  • Unscored —
    CVE-2016-10887

    The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues.

  • Unscored —
    CVE-2016-10888

    The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues.

  • Unscored —
    CVE-2015-9310

    The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.

  • Unscored —
    CVE-2019-15047

    An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4_BitReader::SkipBi…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2019-15048

    An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer overflow in the AP4_RtpAtom class at Core/Ap4Rt…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2019-15049

    An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_Dec3Atom class at Core/Ap4…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2019-15050

    An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_AvccAtom class at Core/Ap4…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2015-9311

    The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.

  • Unscored —
    CVE-2019-0349

    SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRN…

    SAP SAP Kernel (KRNL32NUC) SAP Kernel (KRNL64NUC) SAP Kernel (KERNEL)
  • Unscored —
    CVE-2015-9312 Scanner template

    The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.

  • Unscored —
    CVE-2015-9313

    The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.

  • Unscored —
    CVE-2015-9314

    The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.

  • Unscored —
    CVE-2019-7931

    Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. Succe…

    Adobe Adobe Premiere Pro CC
  • Unscored —
    CVE-2015-9315

    The newstatpress plugin before 1.0.1 for WordPress has SQL injection.

  • Unscored —
    CVE-2019-15046

    Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Ove…

  • Unscored —
    CVE-2016-10889

    The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.

  • Unscored —
    CVE-2019-15025

    The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page.

  • Unscored —
    CVE-2017-18514

    The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.

  • Unscored —
    CVE-2019-7961

    Adobe Prelude CC versions 8.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful ex…

    Adobe Adobe Prelude CC
  • Unscored —
    CVE-2015-9316

    The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppol…

  • Unscored —
    CVE-2019-7870

    Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Succe…

    Adobe Adobe Character Animator
  • High 7.8
    CVE-2019-8062

    Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful …

    Adobe Adobe After Effects
  • Unscored —
    CVE-2019-0351

    A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20,…

    SAP SAP NetWeaver UDDI Server (Services Registry)
  • Unscored —
    CVE-2019-0348

    SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unen…

    SAP SAP Business Objects Business Intelligence Platform (Web Intelligence)
  • Unscored —
    CVE-2019-0346

    Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), ve…

    SAP SAP Business Objects Business Intelligence Platform (CMC)
  • Unscored —
    CVE-2019-0345

    A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java (Administrator S…

    SAP SAP NetWeaver Application Server for Java (Administrator System Overview)
  • Critical 9.8
    CVE-2019-0344 Exploited

    Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 18…

    SAP SAP Commerce Cloud (virtualjdbc extension)
    KEV Sep 30, 2024