Skip to content
OpenAdvisories

Archive

September 2019

Vulnerabilities first published in this month (UTC), newest first.

← August 2019 2019 / September October 2019 →
  1. 1 
  2. 21
  3. 336
  4. 437
  5. 559
  6. 655
  7. 7 
  8. 822
  9. 997
  10. 1057
  11. 11139
  12. 1242
  13. 1350
  14. 1411
  15. 158
  16. 1671
  17. 1772
  18. 1844
  19. 1918
  20. 2077
  21. 2117
  22. 226
  23. 2340
  24. 2430
  25. 25104
  26. 2668
  27. 27311
  28. 283
  29. 291
  30. 3064
All Critical High Medium Low Exploited only Public exploit

1,540 results · Feed

  • Medium 6.5
    CVE-2019-10197

    A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when…

    Samba Samba samba samba Debian Alpine
  • Unscored —
    CVE-2019-13156

    NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial o…

    NAVER NDrive
  • Unscored —
    CVE-2019-15873

    The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an…

  • Unscored —
    CVE-2019-15871

    The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.

  • Unscored —
    CVE-2019-15872

    The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.

  • Unscored —
    CVE-2019-15870

    The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.

  • Unscored —
    CVE-2019-15869

    The JobCareer theme before 2.5.1 for WordPress has stored XSS.

  • Unscored —
    CVE-2019-15868

    The affiliates-manager plugin before 2.6.6 for WordPress has CSRF.

  • Unscored —
    CVE-2019-15867

    The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, …

  • Unscored —
    CVE-2019-15866

    The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp…

  • Unscored —
    CVE-2019-15865

    The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.

  • Unscored —
    CVE-2019-15864

    The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.

  • Unscored —
    CVE-2019-15043 Public exploit Scanner template EPSS 63%

    In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run…

    grafana grafana Ubuntu Alpine
  • Unscored —
    CVE-2019-15863

    The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request…

  • Unscored —
    CVE-2019-15860

    Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002.

    ipe Ubuntu
  • Unscored —
    CVE-2019-15858 Public exploit Scanner template EPSS 20%

    admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthentic…

  • Unscored —
    CVE-2015-9383

    FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.

    freetype freetype Debian Ubuntu
  • Unscored —
    CVE-2015-9382

    FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is misha…

    freetype freetype Debian Ubuntu
  • Unscored —
    CVE-2015-9381

    FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.

    freetype freetype Debian Ubuntu
  • Unscored —
    CVE-2019-15847

    The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_da…

    gcc-snapshot gcc-7-cross-ports gcc-7 gcc-6 Debian Ubuntu Alpine