Skip to content
OpenAdvisories

Archive

26 September 2019

Vulnerabilities first published on this day (UTC), newest first.

← August 2019 2019 / September /26 October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

68 results · Feed

  • Unscored —
    CVE-2015-9440

    The monetize plugin through 1.03 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=monetize-zones-n…

  • Unscored —
    CVE-2015-9439

    The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=ad…

  • Medium 5.3
    CVE-2019-16738

    MediaWiki information disclosure

    In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist
  • Unscored —
    CVE-2015-9438

    The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dw_show_widget id_b…

  • Unscored —
    CVE-2015-9437

    The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dyn…

  • Unscored —
    CVE-2015-9436

    The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix …

  • Unscored —
    CVE-2015-9435

    The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.

  • Unscored —
    CVE-2015-9434

    The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_typ…

  • Unscored —
    CVE-2015-9433

    The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parame…

  • Unscored —
    CVE-2015-9432

    The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/op…

  • Unscored —
    CVE-2015-9431

    The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?pag…

  • Unscored —
    CVE-2019-16899

    In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInf…

  • Unscored —
    CVE-2019-16900

    Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c.

  • Unscored —
    CVE-2019-16901

    Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000…

  • Unscored —
    CVE-2015-9449

    The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=micr…

  • Unscored —
    CVE-2015-9430

    The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.

  • Unscored —
    CVE-2015-9429

    The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?pag…

  • Unscored —
    CVE-2015-9428

    The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp…

  • Unscored —
    CVE-2015-9427

    The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page…

  • Unscored —
    CVE-2015-9426

    The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?acti…

  • Unscored —
    CVE-2015-9425

    The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=opa…

  • Unscored —
    CVE-2015-9424

    The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=mul…

  • Unscored —
    CVE-2015-9423

    The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_field…

  • Unscored —
    CVE-2015-9422

    The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php…

  • Unscored —
    CVE-2015-9421

    The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?…

  • Unscored —
    CVE-2015-9420

    The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_…

  • Unscored —
    CVE-2015-9419

    The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.

  • Unscored —
    CVE-2019-16910

    Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insuf…

    mbedtls mbedtls mbedtls mbedtls3 Debian Ubuntu Alpine