Skip to content
OpenAdvisories

Archive

August 2019

Vulnerabilities first published in this month (UTC), newest first.

← July 2019 2019 / August September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

2,007 results · Feed

  • Unscored —
    CVE-2015-9346

    The cp-polls plugin before 1.0.5 for WordPress has XSS.

  • Unscored —
    CVE-2016-10934

    The check-email plugin before 0.5.2 for WordPress has XSS.

  • Unscored —
    CVE-2019-15649

    The insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has insufficient restrictions …

    Web / CMS
  • Unscored —
    CVE-2019-15648

    The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions…

    Web / CMS
  • Unscored —
    CVE-2019-15647

    The groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action=bulk_action_listener remote code ex…

  • Unscored —
    CVE-2018-21004

    The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.

  • Unscored —
    CVE-2019-15646

    The rsvpmaker plugin before 6.2 for WordPress has SQL injection.

  • Unscored —
    CVE-2015-9345

    The link-log plugin before 2.0 for WordPress has HTTP Response Splitting.

  • Unscored —
    CVE-2015-9344

    The link-log plugin before 2.1 for WordPress has SQL injection.

  • Unscored —
    CVE-2018-21003

    The buddyforms plugin before 2.2.8 for WordPress has SQL injection.

  • Unscored —
    CVE-2018-21002

    The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.

  • Unscored —
    CVE-2019-15645

    The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF.

  • Unscored —
    CVE-2019-15644

    The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS.

  • Unscored —
    CVE-2015-9343

    The wp-rollback plugin before 1.2.3 for WordPress has CSRF.

  • Unscored —
    CVE-2015-9342

    The wp-rollback plugin before 1.2.3 for WordPress has XSS.

  • Unscored —
    CVE-2019-15643

    The ultimate-faqs plugin before 1.8.22 for WordPress has XSS.

  • Unscored —
    CVE-2018-21001

    The anycomment plugin before 0.0.33 for WordPress has XSS.

  • Medium 4.3
    CVE-2019-13237 Public exploit

    Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms

    In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workp…

    org.opencms:opencms-core Maven
  • Medium 6.1
    CVE-2019-13236 Public exploit

    XSS issues in the management interface

    In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.

    org.opencms:opencms-core Maven
  • Medium 6.1
    CVE-2019-13235 Public exploit

    XSS in login form

    In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

    org.opencms:opencms-core Maven
  • Medium 6.1
    CVE-2019-13234 Public exploit

    XSS in search engine

    In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2019-15666

    An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unli…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Critical 9.8
    CVE-2019-15657

    Arbitrary Code Execution in eslint-utils

    In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.

    eslint-utils npm
  • High 7.3
    CVE-2019-15658

    SQL Injection in connect-pg-simple

    connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data.

    connect-pg-simple npm
  • Unscored —
    CVE-2019-15651

    wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading…

    wolfssl wolfssl Debian Ubuntu
  • Unscored —
    CVE-2019-15497

    Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has defa…

  • Unscored —
    CVE-2019-15055

    MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated…

  • Unscored —
    CVE-2018-18668

    GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage …

  • Unscored —
    CVE-2019-9569

    Buffer Overflow in dactetra in Delta Controls enteliBUS Manager V3.40_B-571848 allows remote unauthenticated users to e…

  • Unscored —
    CVE-2019-8460

    OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to…

  • Unscored —
    CVE-2019-8000

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successf…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-8001

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Success…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-7999

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successf…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-7998

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Success…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-7997

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Success…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-7996

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successf…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-7994

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Success…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-7995

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. Successf…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-7993

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful ex…

    Adobe Adobe Photoshop CC
  • Unscored —
    CVE-2019-7992

    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Success…

    Adobe Adobe Photoshop CC