CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- apple macos, mac os x +1 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...8.8 High
- mcafee, llc mcafee frp, mcafee file and removable media protection +1 morePrivilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.2094.1 Medium
- mcafee web gateway, mcafee, llc mcafee web gateway (mwg) +1 moreMWG UI: Cross-Frame Scripting vulnerability7.1 High
- mcafee web gateway, mcafee, llc mcafee web gateway (mwg) +1 moreMWG Proxy: Cross-Frame Scripting vulnerability4.3 Medium
- keycloak, redhat single sign-on +1 moreImproper Verification of Cryptographic Signature in keycloak8.1 High
- keycloakImproper Input Validation and Cross-Site Request Forgery in Keycloak4.6 Medium
- atlassian html include and replace macroThe "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of...6.8 Medium
- micro focus self service password reset (sspr), microfocus netiq self service password reset +1 moreA potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR...9.8 Critical
- sugarcrmSugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop_url= XSS.6.1 Medium
- wpmudev custom sidebarsThe custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import...8.8 High
- wpmudev custom sidebarsThe custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.8.8 High
- google doc embedder project doc embedderThe google-document-embedder plugin before 2.6.1 for WordPress has XSS.6.1 Medium
- google doc embedder project doc embedderThe google-document-embedder plugin before 2.6.2 for WordPress has XSS.6.1 Medium
- google doc embedder project doc embedderThe google-document-embedder plugin before 2.6.2 for WordPress has CSRF.8.8 High
- supsystic newsletter by supsysticThe newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.8.8 High
- expresstech responsive menuThe responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the...8.8 High
- mijnpress simple add pages or postsThe simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users.6.5 Medium
- simple fields project fieldsThe simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface.8.8 High
- simple-membership-plugin simple membershipThe simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.8.8 High
- benjaminrojas wp editorThe wp-editor plugin before 1.2.6 for WordPress has CSRF.8.8 High
- benjaminrojas wp editorThe wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.9.8 Critical
- weplugins wp mapsThe wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location...8.8 High
- weplugins wp mapsThe wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.8.8 High
- weplugins wp mapsThe wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category...8.8 High
- smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csvThe wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.8.8 High
- smackcoders ultimate exporterThe wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.8.8 High
- tipsandtricks-hq all in one wp security \& firewallThe all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL...9.8 Critical
- tipsandtricks-hq all in one wp security \& firewallThe all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL...9.8 Critical
- tipsandtricks-hq all in one wp security \& firewallThe all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL...9.8 Critical
- axiosys bento4An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function...8.8 High
- axiosys bento4An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer overflow in the...8.8 High
- axiosys bento4An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the...8.8 High
- axiosys bento4An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the...8.8 High
- sap advanced business application programming platform kernel, sap se kernel (kernel), kernel (krnl32nuc) +3 more +5 moreSAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7...7.2 High
- newstatpress project newstatpressThe newstatpress plugin before 1.0.6 for WordPress has reflected XSS.6.1 Medium
- newstatpress project newstatpressThe newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.6.1 Medium
- newstatpress project newstatpressThe newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.9.8 Critical
- newstatpress project newstatpressThe newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.6.1 Medium
- adobe premiere pro ccAdobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking...7.8 High
- newstatpress project newstatpressThe newstatpress plugin before 1.0.1 for WordPress has SQL injection.9.8 Critical
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information...7.5 High
- imagely nextgen galleryThe nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.9.8 Critical
- ninjaformsThe ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on...9.8 Critical
- simplerealtytheme simple login logThe simple-login-log plugin before 1.1.2 for WordPress has SQL injection.9.8 Critical
- adobe prelude ccAdobe Prelude CC versions 8.1 and earlier have an insecure library loading (dll hijacking)...7.8 High
- wpfastestcache wp fastest cacheThe wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax...9.8 Critical
- adobe character animatorAdobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking...7.8 High
- adobe after effectsAdobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking)...7.8 High
- sap netweaver, sap se netweaver uddi server (services registry) +1 moreA remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry)...8.8 High
- sap businessobjects business intelligence, sap se business objects business intelligence platform (web intelligence) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can...6.5 Medium
- Show moreLoading…