Skip to content
OpenAdvisories

Archive

10 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /10 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Unscored —
    CVE-2019-16202

    MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts a…

  • Unscored —
    CVE-2017-18611

    The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css par…

  • Unscored —
    CVE-2017-18610

    The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id para…

  • Unscored —
    CVE-2017-18609

    The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.

  • Unscored —
    CVE-2017-18608

    The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18607

    The avada theme before 5.1.5 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18606

    The avada theme before 5.1.5 for WordPress has stored XSS.

  • Unscored —
    CVE-2017-18605

    The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection.

  • Unscored —
    CVE-2017-18604

    The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.

  • Unscored —
    CVE-2017-18603

    The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page…

  • Unscored —
    CVE-2017-18602

    The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp_UserResult id parameter.

  • Unscored —
    CVE-2017-18601

    The examapp plugin 1.0 for WordPress has XSS via exam input text fields.

  • Unscored —
    CVE-2017-18600

    The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field.

  • Unscored —
    CVE-2017-18599

    The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter.

  • Unscored —
    CVE-2017-18598 Scanner template

    The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2…

  • Unscored —
    CVE-2017-18597

    The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tabl…

  • Unscored —
    CVE-2017-18596

    The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.