Skip to content
OpenAdvisories

Archive

13 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /13 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Unscored —
    CVE-2016-10942

    The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id para…

    Web / CMS
  • Unscored —
    CVE-2016-10941

    The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF.

    Web / CMS
  • Unscored —
    CVE-2016-10940 Scanner template

    The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.

  • Unscored —
    CVE-2016-10939

    The xtremelocator plugin 1.5 for WordPress has SQL injection via the id parameter.

  • Unscored —
    CVE-2016-10938

    The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.

  • Unscored —
    CVE-2017-18615

    The kama-clic-counter plugin before 3.5.0 for WordPress has XSS.

  • Unscored —
    CVE-2017-18614

    The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter.

  • Unscored —
    CVE-2017-18613

    The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter.

  • Unscored —
    CVE-2017-18612

    The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter.

  • Unscored —
    CVE-2019-16277

    PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunction…