17 September 2019

72 results · Feed

• Unscored —
  CVE-2019-9681

  Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this info…

  Dahua IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X
  Sep 17, 2019
• Unscored —
  CVE-2018-20336

  An issue was discovered in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buffer overflow issue in parse_req_queries…

  Sep 17, 2019
• Unscored —
  CVE-2019-12755

  Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of…

  Symantec Norton Password Manager
  Sep 17, 2019
• Unscored —
  CVE-2019-9009

  An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to cras…

  Sep 17, 2019
• High 7.2
  CVE-2019-14835

  A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that …

  Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 17, 2019
• Medium 5.6
  CVE-2019-14826

  A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attac…

  Red Hat ipa freeipa freeipa Debian Ubuntu
  Sep 17, 2019
• Unscored —
  CVE-2019-11559

  A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary we…

  Sep 17, 2019
• Unscored —
  CVE-2016-10993 Public exploit Scanner template

  The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter.

  Sep 17, 2019
• Unscored —
  CVE-2016-10992

  The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports fro…

  Sep 17, 2019
• Unscored —
  CVE-2019-15729

  An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentio…

  Sep 17, 2019
• Unscored —
  CVE-2016-10991

  The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion.

  Sep 17, 2019
• Unscored —
  CVE-2016-10990

  The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.

  Sep 17, 2019
• Unscored —
  CVE-2016-10989

  The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF.

  Sep 17, 2019
• Unscored —
  CVE-2016-10988

  The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption,…

  Sep 17, 2019
• Unscored —
  CVE-2016-10987

  The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS.

  Sep 17, 2019
• Unscored —
  CVE-2016-10986

  The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access…

  Sep 17, 2019
• Unscored —
  CVE-2016-10985

  The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.

  Sep 17, 2019
• Unscored —
  CVE-2016-10984

  The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.

  Sep 17, 2019
• Unscored —
  CVE-2016-10983

  The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of …

  Sep 17, 2019
• Unscored —
  CVE-2016-10982

  The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.

  Sep 17, 2019
• Unscored —
  CVE-2016-10981

  The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today…

  Sep 17, 2019
• Unscored —
  CVE-2016-10980

  The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo.

  Sep 17, 2019
• Unscored —
  CVE-2016-10979

  The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS.

  Sep 17, 2019
• Unscored —
  CVE-2016-10978

  The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF.

  Sep 17, 2019
• Unscored —
  CVE-2016-10977

  The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.

  Sep 17, 2019
• Unscored —
  CVE-2016-10976 Scanner template

  The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.

  Sep 17, 2019
• Unscored —
  CVE-2016-10975

  The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter.

  Sep 17, 2019
• Unscored —
  CVE-2016-10974

  The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS.

  Sep 17, 2019
• Unscored —
  CVE-2019-9008

  An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over…

  Sep 17, 2019
• Unscored —
  CVE-2019-15131

  In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may all…

  Sep 17, 2019
• Unscored —
  CVE-2019-16239

  process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encodi…

  openconnect openconnect Debian Ubuntu
  Sep 17, 2019
• Unscored —
  CVE-2019-16378

  OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: …

  opendmarc opendmarc Debian Ubuntu
  Sep 17, 2019