CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- bestwebsoft contact form multiThe contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.6.1 Medium
- bestwebsoft contact formThe contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.6.1 Medium
- bestwebsoft contact formThe contact-form-plugin plugin before 4.0.2 for WordPress has XSS.6.1 Medium
- bestwebsoft contact formThe contact-form-plugin plugin before 3.96 for WordPress has XSS.6.1 Medium
- bestwebsoft contact formThe contact-form-plugin plugin before 3.52 for WordPress has XSS.6.1 Medium
- bestwebsoft contact form to dbThe contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.6.1 Medium
- codepeople contact form emailThe contact-form-to-email plugin before 1.2.66 for WordPress has XSS.6.1 Medium
- codepeople contact form emailThe contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.8.8 High
- bestwebsoft custom admin pageThe custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.6.1 Medium
- bestwebsoft custom searchThe custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.6.1 Medium
- never5 download monitorThe download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.6.1 Medium
- pixelite events managerThe events-manager plugin before 5.6 for WordPress has XSS.6.1 Medium
- pixelite events managerThe events-manager plugin before 5.6 for WordPress has code injection.9.8 Critical
- pixelite events managerThe events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.6.1 Medium
- pixelite events managerThe events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.6.1 Medium
- gtranslate google language translatorThe google-language-translator plugin before 5.0.06 for WordPress has XSS.6.1 Medium
- mediaburst gravity formsThe gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.6.1 Medium
- bestwebsoft htaccessThe htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.6.1 Medium
- wp-jobmanager job managerThe job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.6.1 Medium
- w3eden live formsThe liveforms plugin before 3.4.0 for WordPress has XSS.6.1 Medium
- w3eden live formsThe liveforms plugin before 3.2.0 for WordPress has SQL injection.9.8 Critical
- ibericode mailchimp for wordpressThe mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.6.1 Medium
- simple fields project fieldsThe simple-fields plugin before 1.4.11 for WordPress has XSS.6.1 Medium
- presstigers simple job boardThe simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.6.1 Medium
- 3cx live chatThe wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.6.1 Medium
- atlassian jira, jira server +1 moreThe login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2...5.3 Medium
- floragunn search guardSearch Guard versions before 23.1 had an issue that for aggregations clear text values of...7.5 High
- floragunn search guardSearch Guard versions before 21.0 had an timing side channel issue when using the internal user...5.9 Medium
- uidai maadhaarThe mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in...7.4 High
- open-emr openemrAn issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName...8.8 High
GraphicsMagickSUSESecurity update for GraphicsMagickNo score- schben frameworkAdive Framework through 2.0.7 is affected by XSS in the Create New Table and Create New...4.8 Medium
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 High
- apache traffic server, apple swiftnio, debian linux +1 more +3 moreSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 High
- bluetooth br/edr, apple iphone os, mac os x +145 more +147 moreBlutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation7.6 High
- debian linux, linux kernel +1 moreIn the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference...4.6 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound...6.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a...7.8 High
- real-sec bc vault firmware** DISPUTED ** On BC Vault devices, a side channel for the row-based SSD1309 OLED display was...2.4 Low
- exiv2In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage:...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero...6.5 Medium
- imagemagick, opensuse leap +1 moreIn ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free...6.5 Medium
- floragunn search guardSearch Guard versions before 24.0 had an issue that values of string arrays in documents are not...7.5 High
- Show moreLoading…