CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Command Injection Vulnerability7.2 High
- cisco remote phy, cbr-8 firmware, remote phy 120 firmware +2 more +4 moreCisco Remote PHY Device Software Command Injection Vulnerability6.7 Medium
- cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Command Injection Vulnerability7.2 High
- count per day project per dayThe count-per-day plugin before 3.2.3 for WordPress has XSS via search words.6.1 Medium
- duplicate post project postThe duplicate-post plugin before 2.6 for WordPress has XSS.6.1 Medium
- duplicate post project postThe duplicate-post plugin before 2.6 for WordPress has SQL injection.9.8 Critical
- embed images in comments project images in commentsThe embed-comment-images plugin before 0.6 for WordPress has XSS.6.1 Medium
- bestwebsoft error log viewerThe error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.6.1 Medium
- cisco ios xe, ios xe software +1 moreCisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability8.8 High
- cisco unified contact center expressCisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Information Disclosure Vulnerability5.8 Medium
- cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 moreCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability8.6 High
- cisco hyperflex hx-series, hyperflex hx220c af m5 firmware, hyperflex hx220c edge m5 firmware +3 more +5 moreCisco HyperFlex Static SSL Key Vulnerability6.8 Medium
- cisco roomos, telepresence ce software, telepresence codec c40 firmware +2 more +4 moreCisco RoomOS Software Privilege Escalation Vulnerability4.1 Medium
- cisco enterprise network functions virtualization infrastructure, enterprise nfv infrastructure software +1 moreCisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration Vulnerability4.3 Medium
- flickr justified gallery project justified galleryThe flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.6.1 Medium
- formbuilder project formbuilderThe formbuilder plugin before 1.06 for WordPress has multiple XSS issues.6.1 Medium
- code42 crashplan for small business, for enterprise +1 moreIn Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker...5.5 Medium
- formbuilder project formbuilderThe formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.6.1 Medium
- cozmoslabs profile builderThe profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.6.1 Medium
- cozmoslabs profile builderThe profile-builder plugin before 2.2.5 for WordPress has XSS.6.1 Medium
- cozmoslabs profile builderThe profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.6.1 Medium
- swimordiesoftware rsvpThe rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee...6.1 Medium
- bestwebsoft senderThe sender plugin before 1.2.1 for WordPress has multiple XSS issues.6.1 Medium
- matchboxdesigngroup universal analyticsThe universal-analytics plugin before 1.3.1 for WordPress has XSS.6.1 Medium
- bitdefender antivirus 2020An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and...7.8 High
- bosch iot gateway software, prosyst mbs sdk, prosyst mbs sdk +2 moreServer-side request forgery in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software8.6 High
- aspose aspose.cells, talos aspose +1 moreAn exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose...9.8 Critical
- aspose aspose.words, talos aspose +1 moreAn exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of...9.8 Critical
- aspose aspose.cells, talos aspose +1 moreAn exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose...9.8 Critical
- mcafee, llc data loss prevention (dlpe) for windows, mcafee data loss prevention endpoint +1 moreBuffer overflow in DLP Endpoint for Windows4.4 Medium
- mcafee, llc data loss prevention (dlpe) for windows, mcafee data loss prevention endpoint +1 moreBuffer overflow in DLP Endpoint for Windows4.4 Medium
drupal/imagecache_externalPackagistThis module that allows you to store external images on your server and apply your own Image Styles. The module exposes cookies to external sites when making external image requests. This vulnerabilit…No scoreputtyopenSUSERecommended update for puttyNo score- content audit project auditThe content-audit plugin before 1.9.2 for WordPress has XSS.6.1 Medium
- bestwebsoft testimonialsThe bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.6.1 Medium
- bestwebsoft google mapsThe bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.6.1 Medium
- bestwebsoft google analyticsThe bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.6.1 Medium
- mediaburst booking calendarThe booking-sms plugin before 1.1.0 for WordPress has XSS.6.1 Medium
- analytics tracker project trackerThe analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.6.1 Medium
- ad buttons project buttonsThe ad-buttons plugin before 2.3.2 for WordPress has XSS.6.1 Medium
- godaddy email marketingThe GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.8.8 High
- gowebsolutions wp customer reviewsThe wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.8.8 High
- codepeople booking calendar contact formThe booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.9.8 Critical
- gowebsolutions wp customer reviewsThe wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.6.1 Medium
- codepeople booking calendar contact formThe booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.6.1 Medium
- wpmanage uji countdownThe uji-countdown plugin before 2.0.7 for WordPress has XSS.6.1 Medium
- wp-slimstat slimstat analyticsThe wp-slimstat plugin before 4.8.1 for WordPress has XSS.6.1 Medium
- bestwebsoft updaterThe updater plugin before 1.35 for WordPress has multiple XSS issues.6.1 Medium
- wp front end profile project front end profileThe wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue.9.8 Critical
- Show moreLoading…