CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- ivycat posts in pageThe posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory...8.1 High
- hbwsl slidedeck 2The slidedeck2 plugin before 2.3.5 for WordPress has file inclusion.9.8 Critical
- galliumosIn GalliumOS 3.0, CONFIG_SECURITY_YAMA is disabled but /etc/sysctl.d/10-ptrace.conf tries to set ...7.5 High
- codection import users from csv with metaThe import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.7.5 High
- codection import users from csv with metaThe import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.6.1 Medium
- codection import users from csv with metaThe import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.6.1 Medium
- codection import users from csv with metaThe import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.8.8 High
- 3cx live chatThe wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.6.1 Medium
- tribulant newslettersThe newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection.9.8 Critical
- iptanus wordpress file uploadThe wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of ...7.5 High
- iptanus wordpress file uploadThe wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of ...7.5 High
- iptanus wordpress file uploadThe wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of...7.5 High
- iptanus wordpress file uploadThe wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of ...7.5 High
- webp express project expressThe webp-express plugin before 0.14.11 for WordPress has insufficient protection against...7.5 High
- wpsupportplus wp support plus responsive ticket systemThe wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.6.1 Medium
- wpsupportplus wp support plus responsive ticket systemThe wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure...9.8 Critical
- tp-link tl-wr840n firmwareThe traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is...8.8 High
- wpsupportplus wp support plus responsive ticket systemThe wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.9.8 Critical
- wpsupportplus wp support plus responsive ticket systemThe wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path...5.3 Medium
- wpsupportplus wp support plus responsive ticket systemThe wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect...9.8 Critical
- wpsupportplus wp support plus responsive ticket systemThe wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory...9.1 Critical
- wpsupportplus wp support plus responsive ticket systemThe wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript...6.1 Medium
- google forms project formsThe wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.7.5 High
- cformsii project cformsiiThe cforms2 plugin before 10.2 for WordPress has XSS.6.1 Medium
- insert pages project pagesThe insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template...9.1 Critical
- saschart rich counterThe rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header.6.1 Medium
- ampacheAn issue was discovered in Ampache through 3.9.1. A stored XSS exists in the localplay.php...5.4 Medium
- ampacheAn issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL...8.8 High
- sonatype nexus repository managerIn Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS.5.4 Medium
- elastic apm agent, apm agent for python +1 moreElastic APM agent for Python client CGI proxy redirection flaw7.2 High
- openpgpjsInvalid Curve Attack in openpgp5.9 Medium
- openpgpjsImproper Key Verification in openpgp7.5 High
- openpgpjsMessage Signature Bypass in openpgp7.5 High
- mirasys vmsMirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of...9.8 Critical
- mirasys vmsMirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security...9.8 Critical
- mirasys vmsMirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of...7.5 High
- softvelum nimble streamerNimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful...6.5 Medium
- oscommerceosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....7.2 High
- oscommerceosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....7.2 High
- belwith products, llc hickory smart ethernet bridge, belwith-keeler hickory smart ethernet bridge firmware +1 moreHickory Smart Lock Cleartext Password6.5 Medium
- belwith products, llc hickory smartHickory Smart Lock Insecure Logging on Android6.5 Medium
- belwith products, llc hickory smartHickory Smart Lock Insecure Storage on iOS6.5 Medium
- belwith products, llc hickory smartHickory Smart Lock Insecure Storage on Android6.5 Medium
- post pay counter project pay counterThe post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update...7.5 High
- post pay counter project pay counterThe post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.9.8 Critical
- cozmoslabs profile builderThe profile-builder plugin before 2.1.4 for WordPress has no access control for activating or...7.5 High
- ad inserter project inserterThe ad-inserter plugin before 2.4.22 for WordPress has remote code execution.8.8 High
- ad inserter project inserterThe ad-inserter plugin before 2.4.20 for WordPress has path traversal.7.5 High
- time sheets project sheetsThe time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues.6.1 Medium
- time sheets project sheetsThe time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list.6.1 Medium
- Show moreLoading…