Skip to content
OpenAdvisories

Archive

8 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /8 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2019-16117 Public exploit

    Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via adm…

  • Unscored —
    CVE-2019-16118 Public exploit

    Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via adm…

  • Unscored —
    CVE-2019-16119 Public exploit EPSS 25%

    SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/contro…

  • Unscored —
    CVE-2019-16120

    CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticke…

  • Unscored —
    CVE-2019-16115

    In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used…

    ipe Ubuntu
  • Unscored —
    CVE-2019-16113 Public exploit EPSS 78%

    Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .…

  • Medium 5.3
    CVE-2019-16109

    Authentication Bypass in Devise

    An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmation_token, if a database record has a blank value in the confirmation_token column. (However, there is no scenario within Devise …

    devise ruby-devise Ubuntu RubyGems
  • Unscored —
    CVE-2019-16099

    Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.

  • Unscored —
    CVE-2019-16100

    Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client…

  • Unscored —
    CVE-2019-16101

    Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by s…

  • Unscored —
    CVE-2019-16102

    Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity.

  • Unscored —
    CVE-2019-16103

    Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root B…

  • Unscored —
    CVE-2019-16104

    Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO.

  • Unscored —
    CVE-2019-16105

    Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI.

  • Medium 6.5
    CVE-2019-16097 Public exploit Scanner template EPSS 22%

    Missing Authorization in Harbor

    core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.6 v1.8.3. v.1.9.0. W…

    github.com/goharbor/harbor Go
  • Unscored —
    CVE-2016-10937

    IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.

    imapfilter imapfilter Debian Ubuntu
  • Unscored —
    CVE-2019-16096

    Kilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation involving the number …

  • Unscored —
    CVE-2019-16091

    Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.

    libmysofa libmysofa Debian Ubuntu
  • Unscored —
    CVE-2019-16092

    Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.

    libmysofa libmysofa Debian Ubuntu
  • Unscored —
    CVE-2019-16093

    Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

    libmysofa libmysofa Debian Ubuntu
  • Unscored —
    CVE-2019-16094

    Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

    libmysofa libmysofa Debian Ubuntu
  • Unscored —
    CVE-2019-16095

    Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.

    libmysofa libmysofa Debian Ubuntu