Skip to content
OpenAdvisories

Archive

7 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /7 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Unscored —
    CVE-2015-9454

    The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin…

  • Unscored —
    CVE-2015-9453

    The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL th…

  • Unscored —
    CVE-2015-9452

    The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?pa…

  • Unscored —
    CVE-2015-9451

    The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.…

  • Unscored —
    CVE-2015-9450

    The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.…

  • Unscored —
    CVE-2019-12812

    MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configurat…

    ACTIVESOFT MyBuilder
  • Unscored —
    CVE-2019-12811

    ActiveX Control in MyBuilder before 6.2.2019.814 allow an attacker to execute arbitrary command via the ShellOpen metho…

    ACTIVESOFT MyBuilder
  • Medium 5.1
    CVE-2019-3688

    squid: /usr/sbin/pinger packaged with wrong permission

    The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker tha…

    SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 Linux
  • Unscored —
    CVE-2019-15751

    An unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to execute arbitrary code b…

  • Unscored —
    CVE-2019-15750

    A Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to in…

  • Unscored —
    CVE-2019-15749

    SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to conf…

  • Unscored —
    CVE-2019-15748

    SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to aff…

  • Unscored —
    CVE-2019-15747

    SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Syst…

  • Unscored —
    CVE-2019-15746

    SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the…

  • Unscored —
    CVE-2018-18379

    The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has…

  • Unscored —
    CVE-2019-16263

    The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Althoug…