Archive
August 2019
Vulnerabilities first published in this month (UTC), newest first.
2,007 results · Feed
-
Unscored —
Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checkin…
-
Unscored —
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthentica…
-
Unscored —
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers wit…
-
Unscored —
eQ-3 Homematic CCU2 and CCU3 with the XML-API through 1.2.0 AddOn installed allow Remote Code Execution by unauthentica…
-
Unscored —
UniSign 2.0.4.0 and earlier version contains a stack-based buffer overflow vulnerability which can overwrite the stack …
-
Unscored —
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gai…
-
Unscored —
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are alw…
-
Unscored —
A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller…
-
Unscored —
A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as …
-
Unscored —
A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE…
-
Unscored —
A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (…
-
Unscored —
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5)…
-
Unscored —CVE-2017-18487 Scanner template
The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.
-
Unscored —
The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
-
Unscored —
The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues.
-
Unscored —
The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages.
-
High 7.5
Istio ReDoS Vulnerability
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
-
Unscored —
The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and fi…
-
Unscored —
The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature.
-
Unscored —
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg…
-
Unscored —
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.
-
Unscored —CVE-2017-18490 Scanner template
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
-
Unscored —CVE-2017-18491 Scanner template
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
-
Unscored —
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.
-
Unscored —
The contact-form-plugin plugin before 3.96 for WordPress has XSS.
-
Unscored —
The contact-form-plugin plugin before 3.52 for WordPress has XSS.
-
Unscored —CVE-2017-18492 Scanner template
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
-
Unscored —
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
-
Unscored —
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.
-
Unscored —CVE-2017-18493 Scanner template
The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
-
Unscored —CVE-2017-18494 Scanner template
The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
-
Unscored —
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
-
Unscored —
The events-manager plugin before 5.6 for WordPress has XSS.
-
Unscored —
The events-manager plugin before 5.6 for WordPress has code injection.
-
Unscored —
The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
-
Unscored —
The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
-
Unscored —
The google-language-translator plugin before 5.0.06 for WordPress has XSS.
-
Unscored —
The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.
-
Unscored —CVE-2017-18496 Scanner template
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
-
Unscored —
The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.