Skip to content
OpenAdvisories

Archive

15 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /15 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Unscored —
    CVE-2019-14789 Scanner template

    The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.

  • Unscored —
    CVE-2019-13578

    A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploita…

  • Unscored —
    CVE-2019-14790

    The limb-gallery (aka Limb Gallery) plugin 1.4.0 for WordPress has XSS via the wp-admin/admin-ajax.php?action=grsGaller…

  • Unscored —
    CVE-2019-14795

    The toggle-the-title (aka Toggle The Title) plugin 1.4 for WordPress has XSS via the wp-admin/admin-ajax.php?action=upd…

  • Unscored —
    CVE-2019-14800

    The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription li…

  • Medium 5.7
    CVE-2019-3418

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due …

    ZTE ZXHN F670
  • High 8.1
    CVE-2019-3417

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insuff…

    ZTE ZXHN F670
  • Unscored —
    CVE-2019-14755

    The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Typ…

  • Unscored —
    CVE-2019-15081 Public exploit

    OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing f…

  • Unscored —
    CVE-2019-13223

    A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a den…

    libstb Debian
  • Unscored —
    CVE-2019-13219

    A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a de…

    libstb Debian
  • Unscored —
    CVE-2019-13221

    A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause …

    libstb Debian
  • Unscored —
    CVE-2019-13220

    Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker …

    libstb Debian
  • Unscored —
    CVE-2019-13217

    A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a den…

    libstb Debian
  • Unscored —
    CVE-2019-13222

    An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker …

    libstb Debian
  • Unscored —
    CVE-2019-13218

    Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of…

    libstb Debian