CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- artifex ghostscript, fedoraproject fedora +1 moreA flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure...7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure...7.3 High
- dovecot, dovecot pigeonhole, debian linux +1 more +3 moreIn Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol...9.8 Critical
- riot-os riotIn the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not...7.5 High
- bloodhound project bloodhoundcomponents/Modals/HelpModal.jsx in BloodHound 2.2.0 allows remote attackers to execute arbitrary...8.8 High
- frappepublic/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape...6.1 Medium
- dlink dir-825\/ac g1 firmwareD-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a...8.8 High
- dlink dir-825\/ac g1 firmwareD-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a...8.8 High
- dlink dir-825\/ac g1 firmwareD-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a...8.8 High
- tp-link archer c2 v1 firmware, archer c3200 v1 firmware +1 moreTP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a...8.8 High
- tp-link archer c2 v1 firmware, archer c3200 v1 firmware +1 moreTP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a...8.8 High
- tp-link archer c2 v1 firmware, archer c3200 v1 firmware +1 moreTP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a...8.8 High
- edimax br-6208ac v1 firmwareEdimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a...8.8 High
- edimax br-6208ac v1 firmwareEdimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a...8.8 High
- edimax br-6208ac v1 firmwareEdimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a...8.8 High
- octopus serverIn Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with...4.3 Medium
- imagely nextgen galleryA SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.10 for...9.8 Critical
- micropyramid django crmCross-Site Request Forgery in MicroPyramid Django CRM8.8 High
- easyupdatesmanager easy updates managerThe stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient...4.3 Medium
- codepeople sell downloadsThe sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force...7.5 High
- wc-marketplace wc catalog enquiryThe woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload...7.5 High
- wp-polls project wp-pollsThe wp-polls plugin before 2.72 for WordPress has SQL injection.9.8 Critical
- butlerblog wp-membersThe wp-members plugin before 3.2.8 for WordPress has CSRF.8.8 High
- wp-polls project wp-pollsThe wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option.6.1 Medium
- dev4press gd rating systemThe gd-rating-system plugin before 2.1 for WordPress has XSS in log.php.6.1 Medium
- slickremix feed them socialThe feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds...6.1 Medium
- slickremix feed them socialThe feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the...9.8 Critical
- cksource ckeditorThe ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in...6.1 Medium
- spin-rs project spin-rsWrong memory orderings violates mutual exclusion in spin7.5 High
- visser store exporter for woocommerceThe woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation.9.8 Critical
- bbpress move topics project move topicsThe bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.8.8 High
- genetechsolutions pie registerThe pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE...9.8 Critical
- bbpress move topics project move topicsThe bbp-move-topics plugin before 1.1.6 for WordPress has code injection.9.8 Critical
- bestwebsoft timesheetThe timesheet plugin before 0.1.5 for WordPress has multiple XSS issues.6.1 Medium
- plot plotlyThe wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.6.1 Medium
- codepeople polls cpThe cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list.6.1 Medium
- codepeople polls cpThe cp-polls plugin before 1.0.5 for WordPress has XSS.6.1 Medium
- check email project emailThe check-email plugin before 0.5.2 for WordPress has XSS.6.1 Medium
- elearningfreak insert or embed articulate contentThe insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has...8.8 High
- elearningfreak insert or embed articulate contentThe insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has...6.5 Medium
- groundhoggThe groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action...8.8 High
- carrcommunications rsvpmakerThe rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.9.8 Critical
- carrcommunications rsvpmakerThe rsvpmaker plugin before 6.2 for WordPress has SQL injection.9.8 Critical
- petersplugins link logThe link-log plugin before 2.0 for WordPress has HTTP Response Splitting.7.5 High
- perafox link logThe link-log plugin before 2.1 for WordPress has SQL injection.9.8 Critical
- themekraft buddyformsThe buddyforms plugin before 2.2.8 for WordPress has SQL injection.9.8 Critical
- joomsky js help deskThe js-support-ticket plugin before 2.0.6 for WordPress has CSRF.8.8 High
- zoho salesiqThe zoho-salesiq plugin before 1.0.9 for WordPress has CSRF.8.8 High
- zoho salesiqThe zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS.6.1 Medium
- impress wp rollbackThe wp-rollback plugin before 1.2.3 for WordPress has CSRF.8.8 High
- Show moreLoading…