CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- hewlett packard enterprise (hpe) hpe 3par storeserv management and core software media, hp 3par storeserv management console +1 moreA remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core...8.8 High
- hewlett packard enterprise (hpe) hpe 3par storeserv management and core software media, hp 3par storeserv management console +1 moreA remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ...4.8 Medium
- hewlett packard enterprise (hpe) hpe 3par storeserv management and core software media, hp 3par storeserv management console +1 moreA remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and...9.4 Critical
- hewlett packard enterprise (hpe) hpe 3par service processor, hp 3par service processor firmware +1 moreA remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s):...6.3 Medium
- hewlett packard enterprise (hpe) hpe 3par service processor, hp 3par service processor firmware +1 moreA remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor...9.4 Critical
- hewlett packard enterprise (hpe) hpe 3par service processor, hp 3par service processor firmware +1 moreA remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor...5.4 Medium
- hewlett packard enterprise (hpe) hpe 3par service processor, hp 3par service processor firmware +1 moreA remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service...9.4 Critical
- hewlett packard enterprise (hpe) hpe 3par service processor, hp 3par service processor firmware +1 moreA remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version...9.4 Critical
- hewlett packard enterprise (hpe) hpe 3par service processor, hp 3par service processor firmware +1 moreA remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version...8.8 High
- jitbit helpdeskJitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of...7.2 High
- ncsoft nc launcher2NC Launcher 2 Arbitrary Command Injection Vulnerability8.8 High
- edx recommenderCross-site scripting in recommender-xblock6.1 Medium
- palletsprojects werkzeug, opensuse leap +1 morePallets Werkzeug Insufficient Entropy7.5 High
- unastudio/builder_menu.php?page=sets in UNA 10.0.0-RC1 allows XSS via the System Name field under...4.8 Medium
- unastudio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under...4.8 Medium
- metabox meta boxThe Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders.7.5 High
- codepeople appointment booking calendarThe Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin...6.1 Medium
- mq-woocommerce-products-price-bulk-edit project mq-woocommerce-products-price-bulk-editThe mq-woocommerce-products-price-bulk-edit (aka Woocommerce Products Price Bulk Edit) plugin 2.0...5.4 Medium
- 10web photo galleryThe 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS.5.4 Medium
- 10web photo galleryThe 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion...4.9 Medium
- foliovision fv flowplayer video playerThe FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription...9.8 Critical
- codepeople cp contact form with paypalThe "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing...5.4 Medium
- 23systems lightbox plus colorboxThe Lightbox Plus Colorbox plugin through 2.7.2 for WordPress has cross-site request forgery ...6.1 Medium
- aptana jaxerAptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite...6.5 Medium
- tribulant newslettersThe Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin...5.4 Medium
- foliovision fv flowplayer video playerThe FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.6.1 Medium
- metabox meta boxThe Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin...6.5 Medium
- codecabin wp go mapsThe WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/...5.4 Medium
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_process_user_comment in EXIF extension4.8 Medium
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_scan_thumbnail in EXIF extension4.8 Medium
- google androidOn Samsung mobile devices with N(7.x), and O(8.x), P(9.0) software, FotaAgent allows a malicious...5.5 Medium
- neetcables airstream nas firmwareNeet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be...8.8 High
- mailpileThe "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude...7.5 High
- swann swwhd-intcam-hd firmwareSwann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root.9.8 Critical
- swann swwhd-intcam-hd firmwareSwann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset.5.5 Medium
- tapplock one\+ firmwareThe Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay...8.8 High
- nespresso prodigo firmwareNespresso Prodigio devices lack Bluetooth connection security.8.1 High
- elementalpath cognitoys dino firmwareCognitoys Dino devices allow XSS via the SSID.6.1 Medium
- elementalpath cognitoys dino firmwareCognitoys Dino devices allow profiles_add.html CSRF.5.4 Medium
- edimax 7237rpd firmware, ew-7438rpn mini firmware +1 moreEdimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.8.8 High
- 6kbbs6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php ...8.8 High
- reputeinfosystems arprice litecore/views/arprice_import_export.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin...6.5 Medium
- mijnpress admin-renamer-extendedThe admin-renamer-extended (aka Admin renamer extended) plugin 3.2.1 for WordPress allows wp...5.7 Medium
- deny all firewall project all firewallThe Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page...8.8 High
- acf\ better search projectThe acf-better-search (aka ACF: Better Search) plugin before 3.3.1 for WordPress allows wp-admin...4.3 Medium
- codection import users from csv with metaThe codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp...5.7 Medium
- backpackforlaravel backpack\\crudBackpack\CRUD for Laravel XSS Vulnerability6.1 Medium
- webcraftic woody ad snippetsadmin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for...7.5 High
- getwooplugins woo-variation-swatchesThe woo-variation-swatches (aka Variation Swatches for WooCommerce) plugin 1.0.61 for WordPress...6.1 Medium
- trezor one firmwareOn Trezor One devices before 1.8.2, a side channel for the row-based OLED display was found. The...4.2 Medium
- Show moreLoading…