Archive
27 August 2019
Vulnerabilities first published on this day (UTC), newest first.
62 results · Feed
-
Unscored —
In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inpu…
-
Unscored —
components/Modals/HelpModal.jsx in BloodHound 2.2.0 allows remote attackers to execute arbitrary OS commands (by spawni…
-
Unscored —
public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and…
-
Unscored —
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are …
-
Unscored —
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are …
-
Unscored —
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are …
-
Unscored —
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a gu…
-
Unscored —
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a gu…
-
Unscored —
TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a gu…
-
Unscored —
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are …
-
Unscored —
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are …
-
Unscored —
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are …
-
Unscored —
In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissi…
-
Unscored —
In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploite…
-
Unscored —
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db …
-
Unscored —
In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c.
-
Unscored —
In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c.
-
Unscored —
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool becaus…
-
Unscored —
In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c.
-
Unscored —
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long …
-
Unscored —
In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of expa…
-
Unscored —
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful expl…
-
High 8.8
Cross-Site Request Forgery in MicroPyramid Django CRM
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/.
-
Unscored —
The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option chang…
-
Unscored —
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase …
-
Unscored —
The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads.
-
Unscored —
The wp-polls plugin before 2.72 for WordPress has SQL injection.
-
Unscored —
The wp-members plugin before 3.2.8 for WordPress has CSRF.
-
Unscored —
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option.
-
Unscored —
The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php.
-
Unscored —
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.
-
Unscored —
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more…
-
Unscored —
The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.
-
Unscored —
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation.
-
Unscored —
The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.
-
Unscored —
The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969.
-
Unscored —
The bbp-move-topics plugin before 1.1.6 for WordPress has code injection.
-
Unscored —CVE-2017-18590 Scanner template
The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues.
-
Unscored —
The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.
-
Unscored —
The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list.