CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
-
mpg123Mageia Updated mpg123 packages fix security vulnerability No score -
graphicsmagickMageia Updated graphicsmagick packages fix security issues No score - gosa project gosa, debian linux +1 more The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection,... 6.5 Medium
- mulesoft api gateway, mule runtime, salesforce, inc. mulesoft +1 more +3 more Mule modules contain Directory Traversal 7.5 High
- estsoft alsee A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39.... 7.8 High
- easy pdf restaurant menu upload project pdf restaurant menu upload The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS. 6.1 Medium
- facebook for woocommerce The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via... 8.8 High
- facebook for woocommerce The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF. 8.8 High
- sinaextra sina extension for elementor The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion. 7.5 High
- kunalnagar custom 404 pro The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability... 6.1 Medium
- bitwise-it webp express The webp-express plugin before 0.14.8 for WordPress has stored XSS. 5.4 Medium
- bootstrapped wp ultimate recipe The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS. 5.4 Medium
- wp better permalinks project better permalinks The wp-better-permalinks plugin before 3.0.5 for WordPress has CSRF. 8.8 High
- webp converter for media project converter for media The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF. 8.8 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more Process termination via PID file manipulation 5.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more Code execution on Windows via OpenSSL engine injection 8.2 High
- simple mail address encoder project mail address encoder The simple-mail-address-encoder plugin before 1.7 for WordPress has reflected XSS. 6.1 Medium
- wp-buy visitor traffic real time statistics The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF. 8.8 High
- wp-buy visitor traffic real time statistics The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the... 8.8 High
- icegram engage The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS. 5.4 Medium
- greentreelabs gallery photoblocks The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page... 4.8 Medium
- tribulant one click ssl The one-click-ssl plugin before 1.4.7 for WordPress has CSRF. 8.8 High
- onesignal onesignal-free-web-push-notifications The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the... 5.4 Medium
- wpserveur wps hide login The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in... 9.8 Critical
- wpserveur wps hide login The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass. 9.8 Critical
- wpserveur wps hide login The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass. 9.8 Critical
- wpserveur wps hide login The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass. 9.8 Critical
- wpserveur wps child theme generator The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory... 9.8 Critical
- bold-themes bold page builder The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying... 7.5 High
- login or logout menu item project or logout menu item The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for... 6.1 Medium
- restaurant reservations project reservations The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for... 9.8 Critical
- webcraftic simple 301 redirects The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no... 6.1 Medium
- realestateconnected easy property listings The easy-property-listings plugin before 3.4 for WordPress has XSS. 6.1 Medium
- wpexpertdeveloper wp private content plus The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option... 7.5 High
- 10web photo gallery The photo-gallery plugin before 1.2.42 for WordPress has CSRF. 8.8 High
- memcached memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str... 7.5 High
- datalogic av7000 firmware Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to... 8.8 High
- symantec management center, symantec corporation management center (mc) +1 more An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2... 6.5 Medium
- symantec reporter An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows... 4.9 Medium
- freebsd, netapp clustered data ontap +1 more In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before... 7.5 High
- symantec vip, symantec corporation my vip portal +1 more Symantec My VIP portal, previous version which has already been auto updated, was susceptible to... 4.8 Medium
- micro focus content manager Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This... 4.3 Medium
- symantec corporation proxysg, broadcom advanced secure gateway, symantec proxysg +1 more +3 more The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses... 6.5 Medium
- symantec corporation proxysg, broadcom advanced secure gateway, symantec proxysg +1 more +3 more The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses... 6.1 Medium
- freebsd In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before... 7.5 High
- freebsd, netapp clustered data ontap +1 more In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before... 9.8 Critical
- cisco nx-os, nx-os software 6.0(2)a4(1) +1 more Cisco NX-OS Software NX-API Denial of Service Vulnerability 5.3 Medium
- cisco nx-os software, nx-os +1 more Cisco NX-OS Software SNMP Access Control List Configuration Name Bypass Vulnerability 5.8 Medium
- cisco nexus 9000 series fabric switches in aci, nx-os +1 more Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability 6.8 Medium
- cisco unified computing system, unified computing system (managed), nx-os +2 more Cisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability 7.8 High
- Show olderLoading…