Skip to content
OpenAdvisories

Archive

16 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /16 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • Unscored —
    CVE-2017-18541

    The xo-security plugin before 1.5.3 for WordPress has XSS.

  • Unscored —
    CVE-2017-18542 Scanner template

    The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2018-20971

    The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.

  • Unscored —
    CVE-2018-20972

    The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.

  • Unscored —
    CVE-2018-20973

    The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.

  • Unscored —
    CVE-2019-15113

    The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF.

  • Unscored —
    CVE-2015-9322

    The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.

  • Unscored —
    CVE-2019-15114

    The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18543

    The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.

  • Unscored —
    CVE-2017-18544

    The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.

  • Unscored —
    CVE-2017-18545

    The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.

  • Unscored —
    CVE-2017-18546

    The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.

  • Unscored —
    CVE-2018-20974

    The js-jobs plugin before 1.0.7 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18547

    The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.

  • Unscored —
    CVE-2019-15115

    The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.

  • Unscored —
    CVE-2015-9323 Public exploit Scanner template EPSS 45%

    The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.

  • Unscored —
    CVE-2019-15116

    The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.

  • Unscored —
    CVE-2015-9324

    The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.

  • Unscored —
    CVE-2014-10376

    The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.

  • Unscored —
    CVE-2019-7959

    Creative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulner…

    Adobe Creative Cloud Desktop Application
  • Unscored —
    CVE-2019-7958

    Creative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability. Suc…

    Adobe Creative Cloud Desktop Application
  • Unscored —
    CVE-2019-7957

    Creative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass vulnerability. Successful exploita…

    Adobe Creative Cloud Desktop Application
  • Unscored —
    CVE-2019-8063

    Creative Cloud Desktop Application 4.6.1 and earlier versions have an insecure transmission of sensitive data vulnerabi…

    Adobe Creative Cloud Desktop Application
  • Unscored —
    CVE-2019-7964 EPSS 10%

    Adobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability. Successful exploitation cou…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-15120 Public exploit

    The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.

  • Medium 5.5
    CVE-2019-15119

    cnlh nps vulnerable to file overwrite by local user

    lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.

    github.com/cnlh/nps ehang.io/nps Go
  • Unscored —
    CVE-2019-15117

    parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2019-15118

    check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack e…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2017-18548

    The note-press plugin before 0.1.2 for WordPress has SQL injection.

  • Unscored —
    CVE-2016-10904

    The olimometer plugin before 2.57 for WordPress has SQL injection.

  • Unscored —
    CVE-2015-9325

    The visitors-online plugin before 0.4 for WordPress has SQL injection.

  • Unscored —
    CVE-2015-9326

    The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection.

  • Unscored —
    CVE-2019-14923

    EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field.

  • Unscored —
    CVE-2019-15091

    filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary fi…

  • Unscored —
    CVE-2018-20969

    do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the…

    patch patch patch patch Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 3.5
    CVE-2019-15108

    An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filen…

  • Unscored —
    CVE-2016-10894

    xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (…

    xtrlock xtrlock Debian Ubuntu
  • Unscored —
    CVE-2019-15104 Public exploit

    An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/New…

  • Unscored —
    CVE-2019-15105 Public exploit

    An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability i…

  • Unscored —
    CVE-2019-15106 Public exploit EPSS 25%

    An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password require…