Skip to content
OpenAdvisories

Archive

August 2019

Vulnerabilities first published in this month (UTC), newest first.

← July 2019 2019 / August September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

2,007 results · Feed

  • Unscored —
    CVE-2015-9320

    The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.

  • Unscored —
    CVE-2017-18527 Scanner template

    The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2016-10895

    The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.

  • Unscored —
    CVE-2017-18526

    The moreads-se plugin before 1.4.7 for WordPress has XSS.

  • Unscored —
    CVE-2015-9319

    The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.

  • Unscored —
    CVE-2017-18524

    The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18519

    The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.

  • Unscored —
    CVE-2017-18523

    The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.

  • Unscored —
    CVE-2017-18522

    The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.

  • Unscored —
    CVE-2016-10892

    The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18566 Scanner template

    The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18518 Scanner template

    The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2018-20978

    The wp-all-import plugin before 3.4.7 for WordPress has XSS.

  • Unscored —
    CVE-2017-18567

    The wp-all-import plugin before 3.4.6 for WordPress has XSS.

  • Unscored —
    CVE-2015-9329

    The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.

  • Unscored —
    CVE-2015-9330

    The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.

  • Unscored —
    CVE-2015-9331

    The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.

  • Unscored —
    CVE-2016-10913

    The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.

  • Unscored —
    CVE-2016-10914

    The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.

  • Unscored —
    CVE-2019-15238

    The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.

  • Unscored —
    CVE-2017-18568

    The my-wp-translate plugin before 1.0.4 for WordPress has XSS.

  • Unscored —
    CVE-2017-18569

    The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.

  • Unscored —
    CVE-2016-10915

    The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18520

    The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

  • Unscored —
    CVE-2015-9332

    The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=unin…

  • Unscored —
    CVE-2011-5328

    The user-access-manager plugin before 1.2 for WordPress has CSRF.

  • Unscored —
    CVE-2014-10381

    The user-domain-whitelist plugin before 1.5 for WordPress has CSRF.

  • Unscored —
    CVE-2015-9318

    The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.

  • Unscored —
    CVE-2017-18517 Scanner template

    The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2015-9317

    The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.

  • Unscored —
    CVE-2019-14687

    A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacke…

    Trend Micro Trend Micro Password Manager
  • Unscored —
    CVE-2019-14684

    A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacke…

    Trend Micro Trend Micro Password Manager
  • Unscored —
    CVE-2019-15082

    The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.

  • Unscored —
    CVE-2019-15233 Public exploit

    The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of…

  • Unscored —
    CVE-2019-14430 Public exploit

    plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.

  • Unscored —
    CVE-2019-15291

    An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious US…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2019-11806

    OX App Suite 7.10.1 and earlier has Insecure Permissions.

  • Unscored —
    CVE-2019-11522

    OX App Suite 7.10.0 to 7.10.2 allows XSS.

  • Unscored —
    CVE-2019-11521

    OX App Suite 7.10.1 allows Content Spoofing.

  • Medium 6.1
    CVE-2018-20975

    Cross-site scripting in fat_free_crm

    Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.

    fat_free_crm RubyGems