Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
September

CVEs published in September 2019

1,651 vulnerabilities, 183 critical, 11 exploited.

Known exploitedIn KEVPublic exploitFix available

forcepoint vpn client for windows, vpn client +1 moreForcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path...CVE-2019-61456.7 MediumSeptember 20, 2019
f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 moreF5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6...CVE-2019-66499.1 CriticalSeptember 20, 2019
f5 big-ip asm, big-ip application security manager +1 moreF5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0...CVE-2019-66509.1 CriticalSeptember 20, 2019
para antiochThe Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file...CVE-2014-103977.5 HighSeptember 20, 2019
organizedthemes epicThe epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file...CVE-2014-103967.5 HighSeptember 20, 2019
mtheme-unus project mtheme-unusDirectory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an...CVE-2015-9406EPSS 58.9%7.5 HighSeptember 20, 2019
html-pdf project html-pdfArbitrary File Read in html-pdfCVE-2019-15138Fix available7.5 HighSeptember 20, 2019
pivotal software application service, pivotal application service (pas) +1 morePrivilege escalation through the invitations serviceCVE-2019-112808.8 HighSeptember 20, 2019
topcon net-g5 firmwareAn issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2....CVE-2019-113274.9 MediumSeptember 20, 2019
embedthis goaheadAn issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and...CVE-2019-16645Public exploit8.6 HighSeptember 20, 2019
topcon net-g5 firmwareAn issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2....CVE-2019-113268.8 HighSeptember 20, 2019
prospecta master data onlineProspecta Master Data Online (MDO) allows CSRF.CVE-2018-177896.5 MediumSeptember 20, 2019
vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x...CVE-2019-55219.6 CriticalSeptember 20, 2019
acquia mauticXSS vulnerability in company name field in MauticCVE-2018-11200Fix available6.1 MediumSeptember 20, 2019
ibm security key lifecycle managerIBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong...CVE-2019-45655.9 MediumSeptember 20, 2019
ibm websphere application server, websphere virtual enterprise +1 moreIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote...CVE-2019-45053.7 LowSeptember 20, 2019
draytek vigor2925 firmwareOn DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the...CVE-2019-165346.1 MediumSeptember 20, 2019
draytek vigor2925 firmwareOn DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset...CVE-2019-165336.1 MediumSeptember 20, 2019
cyberseo xpinner liteThe xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with...CVE-2015-94086.5 MediumSeptember 20, 2019
cyberseo xpinner liteThe xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS.CVE-2015-94076.1 MediumSeptember 20, 2019
tuzicmsApp\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index...CVE-2019-166449.8 CriticalSeptember 20, 2019
wp-piwik project wp-piwikThe wp-piwik plugin before 1.0.5 for WordPress has XSS.CVE-2015-94056.1 MediumSeptember 20, 2019
neuvoo neuvoo-jobrollThe neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_keywords XSS.CVE-2015-94046.1 MediumSeptember 20, 2019
neuvoo neuvoo-jobrollThe neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_location XSS.CVE-2015-94036.1 MediumSeptember 20, 2019
usersultra users ultra membershipThe users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file...CVE-2015-94028.8 HighSeptember 20, 2019
websimon-tables project websimon-tablesThe websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php edit_style id XSS.CVE-2015-94014.8 MediumSeptember 20, 2019
typomedia wordpress meta robotsThe wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL...CVE-2015-94008.8 HighSeptember 20, 2019
trivetechnology wp-stats-dashboardThe wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL...CVE-2015-93997.2 HighSeptember 20, 2019
webmaster-source gocodesThe gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.CVE-2015-93988.8 HighSeptember 20, 2019
webmaster-source gocodesThe gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS.CVE-2015-93975.4 MediumSeptember 20, 2019
zrlogAn issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit...CVE-2019-166435.4 MediumSeptember 20, 2019
attosoft auto thickbox plusThe auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus...CVE-2015-93966.1 MediumSeptember 20, 2019
usersultra users ultra membershipThe users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.CVE-2015-93958.8 HighSeptember 20, 2019
usersultra users ultra membershipThe users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp...CVE-2015-93948.8 HighSeptember 20, 2019
usersultra users ultra membershipThe users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.CVE-2015-93935.4 MediumSeptember 20, 2019
usersultra users ultra membershipThe users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.CVE-2015-93925.4 MediumSeptember 20, 2019
ostenta yawppThe yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter.CVE-2015-93916.1 MediumSeptember 20, 2019
admin management xtended project management xtendedThe admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because...CVE-2015-93904.3 MediumSeptember 20, 2019
mtouch quiz project quizThe mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.CVE-2015-93895.4 MediumSeptember 20, 2019
mtouch quiz project quizThe mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.CVE-2015-93886.5 MediumSeptember 20, 2019
mtouch quiz project quizThe mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz...CVE-2015-93866.1 MediumSeptember 20, 2019
mtouch quiz project quizThe mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.CVE-2015-93876.5 MediumSeptember 20, 2019
bestwebsoft quotes and tipsThe quotes-and-tips plugin before 1.20 for WordPress has XSS.CVE-2015-93856.1 MediumSeptember 20, 2019
bestwebsoft relevantThe relevant plugin before 1.0.8 for WordPress has XSS.CVE-2015-93846.1 MediumSeptember 20, 2019
agentevolution impress listingsThe wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS.CVE-2016-110136.1 MediumSeptember 20, 2019
solaplugins sola support ticketsThe sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp...CVE-2016-110125.4 MediumSeptember 20, 2019
usabilitydynamics wp-invoiceThe wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.CVE-2016-110116.5 MediumSeptember 20, 2019
usabilitydynamics wp-invoiceThe wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over...CVE-2016-110105.3 MediumSeptember 20, 2019
usabilitydynamics wp-invoiceThe wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa...CVE-2016-110095.3 MediumSeptember 20, 2019
usabilitydynamics wp-invoiceThe wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal...CVE-2016-110085.3 MediumSeptember 20, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open