Skip to content
OpenAdvisories

Archive

16 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /16 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

71 results · Feed

  • Unscored —
    CVE-2018-21016

    audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of serv…

    gpac gpac ccextractor Debian Ubuntu
  • Unscored —
    CVE-2018-21017

    GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.

    ccextractor Ubuntu
  • Unscored —
    CVE-2019-16346

    ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinte…

  • Unscored —
    CVE-2019-16347

    ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deint…

  • Unscored —
    CVE-2019-16348

    marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c.

  • Unscored —
    CVE-2019-16349

    Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from …

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2019-16350

    ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.

  • Unscored —
    CVE-2019-16351

    ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.

  • Unscored —
    CVE-2019-16352

    ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.

  • Unscored —
    CVE-2016-10971

    The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an…

  • Unscored —
    CVE-2016-10970

    The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.

  • Unscored —
    CVE-2016-10969

    The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.

  • Unscored —
    CVE-2016-10968

    The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.

  • Unscored —
    CVE-2016-10967

    The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks…

  • Unscored —
    CVE-2016-10966

    The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload.

  • Unscored —
    CVE-2016-10965

    The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.

  • Unscored —
    CVE-2016-10964

    The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.

  • Unscored —
    CVE-2016-10963

    The icegram plugin before 1.9.19 for WordPress has XSS.

  • Unscored —
    CVE-2016-10962

    The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.

  • Unscored —
    CVE-2016-10961

    The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.

  • Unscored —
    CVE-2016-10960 Scanner template

    The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.ph…

  • Unscored —
    CVE-2016-10959

    The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_me…

  • Unscored —
    CVE-2016-10958

    The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-adm…

  • Unscored —
    CVE-2016-10957

    The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parame…

  • Unscored —
    CVE-2019-16264

    In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username para…

  • Medium 6.1
    CVE-2019-16197 Public exploit

    Cross-site scripting in Dolibarr

    In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2019-16170

    An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x befo…

  • Critical 9.8
    CVE-2019-16057 Exploited · Ransomware Scanner template EPSS 86%

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

    KEV Apr 15, 2022
  • Unscored —
    CVE-2016-10956 Public exploit Scanner template EPSS 11%

    The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.

  • Unscored —
    CVE-2017-18634

    The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.

  • Unscored —
    CVE-2019-13474

    TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd,…