Skip to content
OpenAdvisories

Archive

20 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /20 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

197 results · Feed

  • Unscored —
    CVE-2017-18522

    The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.

  • Unscored —
    CVE-2016-10892

    The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18566 Scanner template

    The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18518 Scanner template

    The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2018-20978

    The wp-all-import plugin before 3.4.7 for WordPress has XSS.

  • Unscored —
    CVE-2017-18567

    The wp-all-import plugin before 3.4.6 for WordPress has XSS.

  • Unscored —
    CVE-2015-9329

    The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.

  • Unscored —
    CVE-2015-9330

    The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.

  • Unscored —
    CVE-2015-9331

    The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.

  • Unscored —
    CVE-2016-10913

    The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.

  • Unscored —
    CVE-2016-10914

    The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.

  • Unscored —
    CVE-2019-15238

    The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.

  • Unscored —
    CVE-2017-18568

    The my-wp-translate plugin before 1.0.4 for WordPress has XSS.

  • Unscored —
    CVE-2017-18569

    The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.

  • Unscored —
    CVE-2016-10915

    The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18520

    The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

  • Unscored —
    CVE-2015-9332

    The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=unin…

  • Unscored —
    CVE-2011-5328

    The user-access-manager plugin before 1.2 for WordPress has CSRF.

  • Unscored —
    CVE-2014-10381

    The user-domain-whitelist plugin before 1.5 for WordPress has CSRF.

  • Unscored —
    CVE-2015-9318

    The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.

  • Unscored —
    CVE-2017-18517 Scanner template

    The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2015-9317

    The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.

  • Unscored —
    CVE-2019-14687

    A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacke…

    Trend Micro Trend Micro Password Manager
  • Unscored —
    CVE-2019-14684

    A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacke…

    Trend Micro Trend Micro Password Manager
  • Unscored —
    CVE-2019-15082

    The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.

  • Unscored —
    CVE-2019-15233 Public exploit

    The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of…

  • Unscored —
    CVE-2019-14430 Public exploit

    plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.

  • Unscored —
    CVE-2019-15291

    An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious US…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2019-11806

    OX App Suite 7.10.1 and earlier has Insecure Permissions.

  • Unscored —
    CVE-2019-11522

    OX App Suite 7.10.0 to 7.10.2 allows XSS.

  • Unscored —
    CVE-2019-11521

    OX App Suite 7.10.1 allows Content Spoofing.

  • Medium 6.1
    CVE-2018-20975

    Cross-site scripting in fat_free_crm

    Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.

    fat_free_crm RubyGems
  • Unscored —
    CVE-2019-12889 Public exploit

    An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user with local access to onl…

  • Unscored —
    CVE-2019-15239

    In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrec…

    linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  • Unscored —
    CVE-2019-15227

    FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead …

  • Unscored —
    CVE-2019-15237

    Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.

    roundcube roundcube Debian Ubuntu
  • Unscored —
    CVE-2016-10893

    The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests.