CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- icmsdev icmsiCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.6.1 Medium
- floragunn search guardSearch Guard versions before 24.0 had an issue that field caps and mapping API leak field names ...5.3 Medium
- netwrix auditorNetwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs...7.8 High
- txjia imcatAn issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in...9.8 Critical
- frappeAn issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template...9.8 Critical
- frappeAn issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an...8.8 High
- frappeAn issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS...6.1 Medium
- hashicorp nomadHashicorp Nomad Access Control Issues9.8 Critical
- lansweeperLansweeper before 7.1.117.4 allows unauthenticated SQL injection.9.1 Critical
- simple-membership-plugin simple membershipThe simple-membership plugin before 3.5.7 for WordPress has XSS.6.1 Medium
- simplesharebuttons simple share buttons adderThe simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.6.1 Medium
- bestwebsoft social buttons packThe social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.6.1 Medium
- bestwebsoft social loginThe social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.6.1 Medium
- bestwebsoft subscriberThe subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.6.1 Medium
- wpdeveloper twitter cards metaThe twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.6.1 Medium
- wpdeveloper twitter cards metaThe twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.8.8 High
- bestwebsoft twitter buttonThe twitter-plugin plugin before 2.55 for WordPress has XSS.6.1 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 2.0.54 for WordPress has XSS.5.4 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and...5.4 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.5.4 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 2.0.4 for WordPress has XSS.6.1 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.6.1 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.6.1 Medium
- booster for woocommerceThe woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature.6.1 Medium
- telenav scout gps linkThe Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an...7.5 High
- wpovernight woocommerce pdf invoices\& packing slipsThe woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab...6.1 Medium
- najeebmedia ppom for woocommerceThe woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new...5.4 Medium
- wpseeds wp database backupThe wp-database-backup plugin before 5.1.2 for WordPress has XSS.6.1 Medium
- wpseeds wp database backupThe wp-database-backup plugin before 4.3.3 for WordPress has XSS.6.1 Medium
- wpseeds wp database backupThe wp-database-backup plugin before 4.3.3 for WordPress has CSRF.8.8 High
- wpseeds wp database backupThe wp-database-backup plugin before 4.3.1 for WordPress has XSS.6.1 Medium
- wpseeds wp database backupThe wp-database-backup plugin before 4.3.1 for WordPress has CSRF.8.8 High
- wp editor project editorThe wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues.6.1 Medium
- weplugins wp mapsThe wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.6.1 Medium
- weplugins wp mapsThe wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg()...6.1 Medium
- 3cx live chatThe wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.6.1 Medium
- 3cx live chatThe wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.6.1 Medium
- 3cx live chatThe wp-live-chat-support plugin before 6.2.02 for WordPress has XSS.6.1 Medium
- smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csvThe wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS.6.1 Medium
- humanica humatrix 7The Recruitment module in Humanica Humatrix 7 1.0.0.681 and 1.0.0.203 allows remote attackers to...7.5 High
- spdk storage performance development kitIn Storage Performance Development Kit (SPDK) before 19.07, a user of a vhost can cause a crash...6.5 Medium
- mysql project mysqlMySQL for Node.js Unsafe Options5.5 Medium
- google chromeInsufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed...4.3 Medium
- google chromeInappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a...6.5 Medium
- google chromeUse after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to...5.5 Medium
- google chromeOut of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote...6.5 Medium
- google chromeInsufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a...6.5 Medium
- google chromeInsufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker...4.3 Medium
- google chromeInsufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote...6.5 Medium
- google chromeInsufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote...4.3 Medium
- Show moreLoading…