CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- joomsky js job managerThe js-jobs plugin before 1.0.7 for WordPress has CSRF.8.8 High
- neliosoftware nelio ab testingThe nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.8.8 High
- profilepress loginwpThe peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.8.8 High
- duckdev 404 to 301The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.9.8 Critical
- awesomemotive easy digital downloadsThe easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.6.1 Medium
- awesomemotive easy digital downloadsThe easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.9.8 Critical
- themeist i recommend thisThe i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.9.8 Critical
- adobe creative cloud desktop application, creative cloud +1 moreCreative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known...9.8 Critical
- adobe creative cloud desktop application, creative cloud +1 moreCreative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited...9.8 Critical
- adobe creative cloud desktop application, creative cloud +1 moreCreative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass...7.5 High
- adobe creative cloud desktop application, creative cloud +1 moreCreative Cloud Desktop Application 4.6.1 and earlier versions have an insecure transmission of...7.5 High
- adobe experience managerAdobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability....9.8 Critical
- kunenaThe Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.5.4 Medium
- ehang-io npscnlh nps vulnerable to file overwrite by local user5.5 Medium
- linux kernelparse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 morecheck_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion,...5.5 Medium
- datainterlock note pressThe note-press plugin before 0.1.2 for WordPress has SQL injection.9.8 Critical
- olimometer project olimometerThe olimometer plugin before 2.57 for WordPress has SQL injection.9.8 Critical
- bestwebsoft visitors onlineThe visitors-online plugin before 0.4 for WordPress has SQL injection.9.8 Critical
- wpbusinessintelligence wp business intelligenceThe wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection.9.8 Critical
- eyesofnetworkEyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all...8.8 High
- artica integria imsfilemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki...9.8 Critical
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is...3.5 Low
- xtrlock project xtrlock, debian linux +1 morextrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked...4.6 Medium
- zohocorp manageengine applications managerAn issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection...8.8 High
- zohocorp manageengine applications managerAn issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL...8.8 High
- zohocorp manageengine opmanagerAn issue was discovered in Zoho ManageEngine OpManager through 12.4x. One can bypass the user...9.8 Critical
- webminAn issue was discovered in Webmin through 1.920. The parameter old in password_change.cgi...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moredrivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer...4.6 Medium
- linux kernel, canonical ubuntu linux +1 moredrivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer...7.5 High
- diaowen dwsurveyDWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action...6.1 Medium
- nokogiri, canonical ubuntu linux, debian linux +2 moreNokogiri Command Injection Vulnerability9.8 Critical
- mozilla firefox, firefox esr +1 moreWhen a master password is set, it is required to be entered again before stored passwords can be...9.8 Critical
- maxx waves maxx audioRealtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file...7.8 High
- cospas-sarsat systemThe COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages,...9.1 Critical
- vestacp control panelA command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows...8.8 High
- vestacp control panelA directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24...8.8 High
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system...8.1 High
- yes24 viewer activex, pc viewer +1 moreYes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that...8.8 High
- osisoft pi web apiIn OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a...8.8 High
- delta electronics industrial automation dopsoft, deltaww delta industrial automation dopsoft +1 moreIn Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially...7.8 High
- osisoft pi web apiOSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.6.5 Medium
- delta electronics industrial automation dopsoft, deltaww delta industrial automation dopsoft +1 moreIn Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially...7.8 High
- rockwellautomation arenaRockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER...7.8 High
- rockwellautomation arenaRockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an...3.3 Low
- fujielectric frenic loaderFuji Electric FRENIC Loader 3.5.0.0 and prior is vulnerable to an out-of-bounds read...3.3 Low
- clickhouseIn ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and...5.3 Medium
- codesys development system, gateway, control for beaglebone sl +7 more +9 moreAn issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may...7.5 High
- clickhouseIn ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file...9.8 Critical
- codesys development system, gateway, control for beaglebone sl +7 more +9 moreAn issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly...9.8 Critical
- Show moreLoading…