Skip to content
OpenAdvisories

Archive

21 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /21 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

115 results · Feed

  • Unscored —
    DRUPAL-CONTRIB-2019-065

    This module that allows you to store external images on your server and apply your own Image Styles. The module exposes…

    drupal/imagecache_external Packagist
  • Unscored —
    CVE-2017-18560

    The content-audit plugin before 1.9.2 for WordPress has XSS.

  • Unscored —
    CVE-2017-18558 Scanner template

    The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18557 Scanner template

    The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18556 Scanner template

    The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18555

    The booking-sms plugin before 1.1.0 for WordPress has XSS.

  • Unscored —
    CVE-2017-18554

    The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.

  • Unscored —
    CVE-2017-18553

    The ad-buttons plugin before 2.3.2 for WordPress has XSS.

  • Unscored —
    CVE-2016-10903

    The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.

  • Unscored —
    CVE-2016-10902

    The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.

  • Unscored —
    CVE-2016-10909

    The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.

  • Unscored —
    CVE-2016-10901

    The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.

  • Unscored —
    CVE-2016-10908

    The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.

  • Unscored —
    CVE-2016-10900

    The uji-countdown plugin before 2.0.7 for WordPress has XSS.

  • Unscored —
    CVE-2019-15112

    The wp-slimstat plugin before 4.8.1 for WordPress has XSS.

  • Unscored —
    CVE-2017-18565 Scanner template

    The updater plugin before 1.35 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2019-15111

    The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue.

  • Unscored —
    CVE-2019-15110

    The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.

  • Unscored —
    CVE-2017-18540

    The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.

  • Unscored —
    CVE-2017-18539

    The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.

  • Unscored —
    CVE-2017-18538

    The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.

  • Unscored —
    CVE-2017-18537 Scanner template

    The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2016-10898

    The total-security plugin before 3.4.1 for WordPress has XSS.

  • Unscored —
    CVE-2016-10899

    The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability.

  • Unscored —
    CVE-2019-15109

    The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.

  • Unscored —
    CVE-2015-9321

    The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.

  • Unscored —
    CVE-2017-18534

    The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.

  • Unscored —
    CVE-2016-10897

    The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18536 Scanner template

    The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.

  • Unscored —
    CVE-2016-10896

    The seo-redirection plugin before 4.3 for WordPress has stored XSS.

  • Unscored —
    CVE-2019-15296

    An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits…

    faad2 faad2 faad2 Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-15293

    An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDE_…

  • Unscored —
    CVE-2019-15292

    An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Low 2.7
    CVE-2019-13458

    An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community Edition 5.0.x through 5…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2019-12746

    An issue was discovered in Open Ticket Request System (OTRS) Community Edition 5.0.x through 5.0.36 and 6.0.x through 6…

    otrs2 otrs2 Debian Ubuntu