Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
August

CVEs published in August 2019

2,040 vulnerabilities, 318 critical, 7 exploited.

Known exploitedIn KEVPublic exploitFix available

jenkins ibm application security on cloud, jenkins project ibm application security on cloud plugin +1 moreJenkins IBM AppScan Plugin showed plain text password in job configuration form fieldsCVE-2019-10391Fix available6.5 MediumAugust 28, 2019
jenkins splunk, jenkins project splunk plugin +1 moreJenkins Splunk Plugin Sandbox BypassCVE-2019-10390Fix available8.8 HighAugust 28, 2019
jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreCross-Site Request Forgery in JenkinsCVE-2019-10384Fix available8.8 HighAugust 28, 2019
jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10383Fix available4.8 MediumAugust 28, 2019
automattic jetpackThe Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().CVE-2015-93596.1 MediumAugust 28, 2019
wtfutil wtfWTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for...CVE-2019-157165.5 MediumAugust 28, 2019
ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in the Ceph RGW configuration with Beast as the front end handling client...CVE-2019-10222Fix available7.5 HighAugust 28, 2019
ithemes builder style manageriThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and...CVE-2015-93796.1 MediumAugust 28, 2019
ithemes builder theme marketiThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and...CVE-2015-93786.1 MediumAugust 28, 2019
ithemes builder theme depotiThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and...CVE-2015-93776.1 MediumAugust 28, 2019
ithemes mobileiThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().CVE-2015-93766.1 MediumAugust 28, 2019
ithemes table rate shippingTable Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via...CVE-2015-93756.1 MediumAugust 28, 2019
ithemes stripeStripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and...CVE-2015-93746.1 MediumAugust 28, 2019
webdevstudios ithemes paypal proPayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and...CVE-2015-93736.1 MediumAugust 28, 2019
ithemes membershipMembership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and...CVE-2015-93726.1 MediumAugust 28, 2019
ithemes manual purchasesManual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg...CVE-2015-93716.1 MediumAugust 28, 2019
ithemes invoicesInvoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and...CVE-2015-93706.1 MediumAugust 28, 2019
ithemes easy us sales taxesEasy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via...CVE-2015-93696.1 MediumAugust 28, 2019
ithemes easy eu value added \(vat\) taxesEasy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS...CVE-2015-93686.1 MediumAugust 28, 2019
ithemes easy canadian sales taxesEasy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via...CVE-2015-93676.1 MediumAugust 28, 2019
ithemes custom url trackingCustom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via...CVE-2015-93666.1 MediumAugust 28, 2019
ithemes authorize.netAuthorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg()...CVE-2015-93656.1 MediumAugust 28, 2019
2checkout ithemes 2checkout2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and...CVE-2015-93646.1 MediumAugust 28, 2019
ithemes exchangeiThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().CVE-2015-93636.1 MediumAugust 28, 2019
never5 post connectorThe Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and...CVE-2015-93626.1 MediumAugust 28, 2019
never5 related postsThe Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and...CVE-2015-93616.1 MediumAugust 28, 2019
updraftplusThe updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and...CVE-2015-93606.1 MediumAugust 28, 2019
my calendar project calendarThe my-calendar plugin before 3.1.10 for WordPress has XSS.CVE-2019-157136.1 MediumAugust 28, 2019
entropic project entropiccli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which...CVE-2019-157145.3 MediumAugust 28, 2019
feedwordpress project feedwordpressThe feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and...CVE-2015-93586.1 MediumAugust 28, 2019
automattic akismetThe akismet plugin before 3.1.5 for WordPress has XSS.CVE-2015-9357Public exploit6.1 MediumAugust 28, 2019
wp-vipergb project wp-vipergbThe wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and...CVE-2015-93566.1 MediumAugust 28, 2019
updraftplusThe updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker...CVE-2017-185936.1 MediumAugust 28, 2019
simbahosting two-factor-authenticationThe two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.CVE-2015-93556.1 MediumAugust 28, 2019
sharebar project sharebarThe sharebar plugin before 1.2.2 for WordPress has SQL injection.CVE-2012-67199.8 CriticalAugust 28, 2019
sharebar project sharebarThe sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491.CVE-2012-67186.1 MediumAugust 28, 2019
redirectionThe redirection plugin before 2.2.9 for WordPress has XSS in the admin menu, a different issue...CVE-2011-53296.1 MediumAugust 28, 2019
redirectionThe redirection plugin before 2.2.12 for WordPress has XSS, a different issue than CVE-2011-4562.CVE-2012-67176.1 MediumAugust 28, 2019
tri gigpressThe gigpress plugin before 2.3.11 for WordPress has XSS.CVE-2015-93544.8 MediumAugust 28, 2019
tri gigpressThe gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different...CVE-2015-93537.2 HighAugust 28, 2019
gallagher command centreAn issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade,...CVE-2019-152949.8 CriticalAugust 28, 2019
apache http server, oracle communications element manager, communications session report manager +4 more +6 moreIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...CVE-2019-10097Fix availableEPSS 52.9%7.2 HighAugust 28, 2019
debian linux, linux kernel, canonical ubuntu linux +36 more +38 moreThere is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell...CVE-2019-14816Fix available5.5 MediumAugust 28, 2019
linux kernel, netapp altavault, baseboard management controller +15 more +17 morekernel is vulnerable to a NoneCVE-2019-14815Fix available7.8 HighAugust 28, 2019
debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreThere is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the...CVE-2019-14814Fix available5.5 MediumAugust 28, 2019
isc keaA packet containing a malformed DUID can cause the kea-dhcp6 server to terminateCVE-2019-6474Fix available5.7 MediumAugust 28, 2019
ics keaA packet containing a malformed DUID can cause the kea-dhcp6 server to terminateCVE-2019-6473Fix available6.5 MediumAugust 28, 2019
isc keaA packet containing a malformed DUID can cause the kea-dhcp6 server to terminateCVE-2019-6472Fix available6.5 MediumAugust 28, 2019
artifex ghostscript, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in, ghostscript versions prior to 9.28, in the .pdfexectoken and other...CVE-2019-14817Fix available7.3 HighAugust 28, 2019
artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreA flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where...CVE-2019-14813Fix availableEPSS 11.0%7.3 HighAugust 28, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open