Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
August

CVEs published in August 2019

2,040 vulnerabilities, 318 critical, 7 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm datapower gateway, mq appliance +1 moreIBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ...CVE-2019-42948.4 HighAugust 20, 2019
ibm cloud privateIBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow...CVE-2019-41174.3 MediumAugust 20, 2019
ibm mqIBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local...CVE-2019-40496.2 MediumAugust 20, 2019
johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 moreMetasys use of hardcoded RC2 keyCVE-2019-75946.8 MediumAugust 20, 2019
johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 moreMetasys use of shared RSA key pairsCVE-2019-75936.8 MediumAugust 20, 2019
assign-deep project assign-deepassign-deep Vulnerable to Prototype PollutionCVE-2019-10745Fix available7.5 HighAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the...CVE-2019-39688.8 HighAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal...CVE-2019-3967EPSS 29.5%6.5 MediumAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the...CVE-2019-39666.1 MediumAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the...CVE-2019-39656.1 MediumAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id...CVE-2019-3964EPSS 52.7%6.1 MediumAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the...CVE-2019-3963EPSS 52.7%6.1 MediumAugust 20, 2019
tibco ftl, tibco software inc. ftl community edition, ftl developer edition +1 more +3 moreTIBCO FTL Escalation Of Privileges for Realm ConfigurationCVE-2019-112098.8 HighAugust 20, 2019
ti tm4c123 firmware, tm4c129 firmware +1 moreAn issue was discovered in the Texas Instruments (TI) TM4C microcontroller series, such as the...CVE-2018-180564.6 MediumAugust 20, 2019
rimons twitter widget project twitter widgetThe rimons-twitter-widget plugin before 1.3 for WordPress has XSS.CVE-2017-185336.1 MediumAugust 20, 2019
bestwebsoft realtyThe realty plugin before 1.1.0 for WordPress has multiple XSS issues.CVE-2017-185326.1 MediumAugust 20, 2019
raygun raygun4wpThe raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than...CVE-2017-185316.1 MediumAugust 20, 2019
bestwebsoft ratingThe rating-bws plugin before 0.2 for WordPress has multiple XSS issues.CVE-2017-185306.1 MediumAugust 20, 2019
bestwebsoft promobarThe promobar plugin before 1.1.1 for WordPress has multiple XSS issues.CVE-2017-185296.1 MediumAugust 20, 2019
bestwebsoft pdf \& printThe pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.CVE-2017-185286.1 MediumAugust 20, 2019
optiontree project optiontreeThe option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.CVE-2015-93206.1 MediumAugust 20, 2019
bestwebsoft paginationThe pagination plugin before 1.0.7 for WordPress has multiple XSS issues.CVE-2017-185276.1 MediumAugust 20, 2019
optiontree project optiontreeThe option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or...CVE-2016-108956.1 MediumAugust 20, 2019
lamp-solutions moreads seThe moreads-se plugin before 1.4.7 for WordPress has XSS.CVE-2017-185266.1 MediumAugust 20, 2019
greg\'s high performance seo project high performance seoThe gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old...CVE-2015-93196.1 MediumAugust 20, 2019
antoineh football poolThe football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.CVE-2017-185246.1 MediumAugust 20, 2019
marvinlabs wp customer areaThe customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.CVE-2017-185196.1 MediumAugust 20, 2019
eelv newsletter project newsletterThe eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.CVE-2017-185238.8 HighAugust 20, 2019
eelv newsletter project newsletterThe eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.CVE-2017-185226.1 MediumAugust 20, 2019
kibokolabs chained quizThe chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.CVE-2016-108926.1 MediumAugust 20, 2019
bestwebsoft user roleThe user-role plugin before 1.5.6 for WordPress has multiple XSS issues.CVE-2017-185666.1 MediumAugust 20, 2019
bestwebsoft smtpThe bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.CVE-2017-185186.1 MediumAugust 20, 2019
soflyy wp all importThe wp-all-import plugin before 3.4.7 for WordPress has XSS.CVE-2018-209786.1 MediumAugust 20, 2019
soflyy wp all importThe wp-all-import plugin before 3.4.6 for WordPress has XSS.CVE-2017-185676.1 MediumAugust 20, 2019
soflyy wp all importThe wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.CVE-2015-93296.1 MediumAugust 20, 2019
soflyy wp all importThe wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.CVE-2015-93309.8 CriticalAugust 20, 2019
soflyy wp all importThe wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests...CVE-2015-93317.5 HighAugust 20, 2019
joomunited wp latest postsThe wp-latest-posts plugin before 3.7.5 for WordPress has XSS.CVE-2016-109136.1 MediumAugust 20, 2019
add from server project from serverThe add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.CVE-2016-109148.8 HighAugust 20, 2019
cformsii project cformsiiThe cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.CVE-2019-152388.8 HighAugust 20, 2019
mythemeshop my wp translateThe my-wp-translate plugin before 1.0.4 for WordPress has XSS.CVE-2017-185686.1 MediumAugust 20, 2019
mythemeshop my wp translateThe my-wp-translate plugin before 1.0.4 for WordPress has CSRF.CVE-2017-185698.8 HighAugust 20, 2019
supsystic popupThe popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.CVE-2016-109158.8 HighAugust 20, 2019
wp-kama democracy pollThe democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class...CVE-2017-185206.1 MediumAugust 20, 2019
wordpress uninstall project uninstallThe uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin...CVE-2015-93326.5 MediumAugust 20, 2019
user access manager project access managerThe user-access-manager plugin before 1.2 for WordPress has CSRF.CVE-2011-53288.8 HighAugust 20, 2019
user domain whitelist project domain whitelistThe user-domain-whitelist plugin before 1.5 for WordPress has CSRF.CVE-2014-103818.8 HighAugust 20, 2019
getawesomesupport awesome supportThe awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes...CVE-2015-93187.5 HighAugust 20, 2019
bestwebsoft pinterestThe bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.CVE-2017-185176.1 MediumAugust 20, 2019
getawesomesupport awesome supportThe awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.CVE-2015-93176.1 MediumAugust 20, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open