Archive
August 2019
Vulnerabilities first published in this month (UTC), newest first.
2,007 results · Feed
-
Unscored —
The liveforms plugin before 3.4.0 for WordPress has XSS.
-
Unscored —
The liveforms plugin before 3.2.0 for WordPress has SQL injection.
-
Unscored —
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.
-
Unscored —
The simple-fields plugin before 1.4.11 for WordPress has XSS.
-
Unscored —
The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
-
Unscored —
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.
-
Unscored —
The login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2 allows remote attacke…
-
Unscored —
Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.
-
Unscored —
Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.
-
Unscored —
The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks again…
-
Unscored —
An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can…
-
Unscored —
An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an at…
-
Unscored —
Adive Framework through 2.0.7 is affected by XSS in the Create New Table and Create New Navigation Link functions.
-
High 7.5CVE-2019-9514 EPSS 83%
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depe…
-
Unscored —
On BC Vault devices, a side channel for the row-based SSD1309 OLED display was found. The power consumption of each row…
-
Unscored —
In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpi…
-
Unscored —
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftIm…
-
Unscored —
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob f…
-
Unscored —
Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.
-
Unscored —
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.
-
Unscored —
Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fi…
-
Unscored —
Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-fold…
-
Unscored —
An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action.
-
Unscored —
An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection (SSTI) issue …
-
Unscored —
An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection.
-
Unscored —
An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.
-
Critical 9.8
Hashicorp Nomad Access Control Issues
HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver.
-
Unscored —
Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.
-
Unscored —
The simple-membership plugin before 3.5.7 for WordPress has XSS.
-
Unscored —
The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.
-
Unscored —CVE-2017-18500 Scanner template
The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
-
Unscored —CVE-2017-18501 Scanner template
The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.
-
Unscored —CVE-2017-18502 Scanner template
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
-
Unscored —
The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.
-
Unscored —
The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.
-
Unscored —CVE-2017-18505 Scanner template
The twitter-plugin plugin before 2.55 for WordPress has XSS.
-
Unscored —
The ultimate-member plugin before 2.0.54 for WordPress has XSS.
-
Unscored —
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations.
-
Unscored —
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.
-
Unscored —
The ultimate-member plugin before 2.0.4 for WordPress has XSS.