CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- atlassian jira, jira server +1 moreThe ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the...4.3 Medium
- atlassian jira, jira server +1 moreThe /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to...5.3 Medium
- atlassian jira, jira server +1 moreSeveral worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before...5.3 Medium
- atlassian jira, jira server +1 moreThe wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8...5.4 Medium
- atlassian universal plugin managerThe Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from...4.3 Medium
- atlassian jira, jira server +1 moreThe ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before...6.1 Medium
- atlassian jira, jira server +1 moreThe ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8...4.3 Medium
- atlassian jira, jira server +1 moreVarious exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8...6.5 Medium
- atlassian jira, jira server +1 moreThe AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version...4.3 Medium
- atlassian jira, jira server +1 moreThe startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3,...6.1 Medium
- atlassian jiraThe MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject...6.1 Medium
- floragunn search guard kibana plugin, search-guard search guard +1 moreSearch Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an...6.1 Medium
- floragunn search guard kibana plugin, search-guard search guard +1 moreSearch Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an...8.8 High
- floragunn search guardSearch Guard versions before 23.1 had an issue that an administrative user is able to retrieve...4.9 Medium
- selectize-plugin-a11y project selectize-plugin-a11yCross-Site Scripting in selectize-plugin-a11y6.1 Medium
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21.9.8 Critical
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21.7.5 High
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21.6.1 Medium
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21.8.8 High
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21.9.8 Critical
- igniterealtime openfireCross-site Scripting in Ignite Realtime Openfire6.1 Medium
- schoolexperience department for education school experienceDfE School Experience before v16333-GA has XSS via a teacher training URL.6.1 Medium
- django js reverse project js reserveCross-site Scripting in django-js-reverse6.1 Medium
- boltcms boltCross-site Scripting in Bolt6.1 Medium
- boltcms boltBolt Cross-site Scripting (XSS) via an image's alt or title field6.1 Medium
- boltcms boltBolt Cross-site Scripting (XSS) via a title that is mishandled in the system log6.1 Medium
- kimai 2Kimai v2 is vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- domoticzDomoticz 4.10717 has XSS via item.Name.5.4 Medium
- joobyCross-site Scripting in Jooby6.1 Medium
- former project formerFormer before 4.2.1 has XSS via a checkbox value.6.1 Medium
- telegramThe Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an...5.3 Medium
- openwrt libuci, motorola c1 mwr03 firmware, cx2l mwr04l firmware +2 moreAn issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface)...7.5 High
- octopus serverIn Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an...6.5 Medium
- octopus tentacle, server +1 moreIn Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds...9.8 Critical
- linux kernel, canonical ubuntu linux +1 moredrivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via...9.8 Critical
- hackmd codimdCodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in...6.1 Medium
- getvera vera edge firmwarecgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users...8.8 High
libp2p-secionpmIdentity Spoofing in libp2p-secio9.1 Criticalrgb2hexnpmDenial of Service in rgb2hex6.5 Medium- cisco clamavClamAV Zip Bomb Vulnerability7.5 High
- cformsii project cformsiiThe cforms2 plugin before 10.5 for WordPress has XSS.6.1 Medium
- dockerIn Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path...8.4 High
- email-newsletter project email-newsletterThe email-newsletter plugin through 20.15 for WordPress has SQL injection.9.8 Critical
- crafty social buttons project social buttonsThe crafty-social-buttons plugin before 1.5.8 for WordPress has XSS.6.1 Medium
- dwbooster corner adThe corner-ad plugin before 1.0.8 for WordPress has XSS.6.1 Medium
- pippinsplugins featured commentsThe feature-comments plugin before 1.2.5 for WordPress has CSRF for featuring or burying a comment.4.3 Medium
- onelogin saml ssoThe onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for...7.5 High
- advanced ajax page loader project ajax page loaderThe advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the...5.3 Medium
- advancedcustomfields advanced custom fieldsThe advanced-custom-fields plugin before 5.7.8 for WordPress has XSS by authors.5.4 Medium
- Show moreLoading…