Skip to content
OpenAdvisories

Archive

August 2019

Vulnerabilities first published in this month (UTC), newest first.

← July 2019 2019 / August September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

2,007 results · Feed

  • Unscored —
    CVE-2016-10911

    The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2015-9328

    The profile-builder plugin before 2.2.5 for WordPress has XSS.

  • Unscored —
    CVE-2014-10380

    The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.

  • Unscored —
    CVE-2017-18563

    The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen.

  • Unscored —
    CVE-2017-18564 Scanner template

    The sender plugin before 1.2.1 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2016-10912

    The universal-analytics plugin before 1.3.1 for WordPress has XSS.

  • Unscored —
    CVE-2019-15295

    An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bit…

  • High 8.6
    CVE-2019-11897

    Server-side request forgery in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software

    A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this co…

    Bosch ProSyst IoT Gateway Software mBS SDK
  • Critical 9.8
    CVE-2019-5032

    An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19.1.0 libr…

  • Critical 9.8
    CVE-2019-5041

    An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words lib…

  • Critical 9.8
    CVE-2019-5033

    An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1.0 librar…

  • Medium 4.4
    CVE-2019-3634

    Buffer overflow in DLP Endpoint for Windows

    Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via an encrypted message sent to DLPe which when decrypted results in DLPe reading unallocated me…

    McAfee Data Loss Prevention (DLPe) for Windows Windows
  • Medium 4.4
    CVE-2019-3633

    Buffer overflow in DLP Endpoint for Windows

    Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via a carefully constructed message sent to DLPe which bypasses DLPe internal checks and results …

    McAfee Data Loss Prevention (DLPe) for Windows Windows
  • Unscored —
    DRUPAL-CONTRIB-2019-065

    This module that allows you to store external images on your server and apply your own Image Styles. The module exposes…

    drupal/imagecache_external Packagist
  • Unscored —
    CVE-2017-18560

    The content-audit plugin before 1.9.2 for WordPress has XSS.

  • Unscored —
    CVE-2017-18558 Scanner template

    The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18557 Scanner template

    The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18556 Scanner template

    The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18555

    The booking-sms plugin before 1.1.0 for WordPress has XSS.

  • Unscored —
    CVE-2017-18554

    The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.

  • Unscored —
    CVE-2017-18553

    The ad-buttons plugin before 2.3.2 for WordPress has XSS.

  • Unscored —
    CVE-2016-10903

    The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.

  • Unscored —
    CVE-2016-10902

    The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.

  • Unscored —
    CVE-2016-10909

    The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.

  • Unscored —
    CVE-2016-10901

    The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.

  • Unscored —
    CVE-2016-10908

    The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.

  • Unscored —
    CVE-2016-10900

    The uji-countdown plugin before 2.0.7 for WordPress has XSS.

  • Unscored —
    CVE-2019-15112

    The wp-slimstat plugin before 4.8.1 for WordPress has XSS.

  • Unscored —
    CVE-2017-18565 Scanner template

    The updater plugin before 1.35 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2019-15111

    The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue.

  • Unscored —
    CVE-2019-15110

    The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.

  • Unscored —
    CVE-2017-18540

    The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.

  • Unscored —
    CVE-2017-18539

    The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.

  • Unscored —
    CVE-2017-18538

    The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.

  • Unscored —
    CVE-2017-18537 Scanner template

    The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2016-10898

    The total-security plugin before 3.4.1 for WordPress has XSS.

  • Unscored —
    CVE-2016-10899

    The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability.

  • Unscored —
    CVE-2019-15109

    The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.

  • Unscored —
    CVE-2015-9321

    The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.

  • Unscored —
    CVE-2017-18534

    The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.