CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- netskope, netskope client +1 moreNetskope client buffer overflow vulnerability5.5 Medium
- ibm mqIBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1...5.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow...5.3 Medium
- silverstripe, symbiote versionedfiles +1 moreSilverStripe Versioned Files module Unpublished files are exposed publicly5.3 Medium
- inoideas inoerpdownload.php in inoERP 4.15 allows SQL injection through insecure deserialization.9.8 Critical
- yzmcmsAn HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a...6.1 Medium
- honeywell performance ip cameras, performance nvrs, h2w2pc1m firmware +58 more +60 moreIn Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the...5.3 Medium
- silverstripeSilverStripe Priviledge escalation through cache pollution2.7 Low
- silverstripeSilverStripe asset-admin Cross-site Scripting (XSS)5.4 Medium
- fedoraproject fedora, mit krb5, kerberos 5 +2 moreA flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a...7.5 High
- silverstripeBroken access control on files5.3 Medium
- teampassTeamPass Cross-site Scripting (XSS) vulnerability5.4 Medium
- plutinosoft platinumPlatinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks...5.3 Medium
- bookmarkify project bookmarkifyThe bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options...6.5 Medium
- avenirsoft directdownloadThe avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin...6.5 Medium
- wp accurate form data project accurate form dataThe accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant...6.5 Medium
- altosresearch altos-connectThe altos-connect plugin 1.3.0 for WordPress has XSS via the wp-content/plugins/altos-connect...6.1 Medium
- unitegallery unite gallery liteThe unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin...8.8 High
- unitegallery unite gallery liteThe unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to...8.8 High
- unitegallery unite gallery liteThe unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin...6.5 Medium
- pressified sendpressThe sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page...8.8 High
- monetize project monetizeThe monetize plugin through 1.03 for WordPress has CSRF with resultant XSS via wp-admin/admin.php...6.5 Medium
- addthisThe addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin...4.8 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki information disclosure5.3 Medium
- display-widgets project display-widgetsThe display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php...5.4 Medium
- vivwebsolutions dynamic widgetsThe dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp...6.5 Medium
- vivwebsolutions dynamic widgetsThe dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php...5.4 Medium
- dash10 oauth serverThe oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.9.8 Critical
- kiwi-logo-carousel project kiwi-logo-carouselThe kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp...6.5 Medium
- wp social bookmarking light project social bookmarking lightThe wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS...6.5 Medium
- thealpinepress alpine-photo-tile-for-instagramThe alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant...6.5 Medium
- qtranslate x project xThe qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin...6.5 Medium
- advantech webaccess\/hmi designerIn Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow...7.5 High
- advantech webaccess\/hmi designerAdvantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy...7.5 High
- advantech webaccess\/hmi designerAdvantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at...7.5 High
- efficientscripts microblog posterThe microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options...7.2 High
- crazy bone project boneThe crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.6.1 Medium
- yithemes yith maintenance modeThe yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the...6.5 Medium
- wplegalpages wp legal pagesThe wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin...6.5 Medium
- googmonify project googmonifyThe googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin...6.5 Medium
- manual image crop project image cropThe manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp...4.6 Medium
- byonepress social lockerThe social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin...5.4 Medium
- doc4design multiconsThe multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin...6.5 Medium
- simplysymphony plugneditThe PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax...5.4 Medium
- simplysymphony plugneditThe PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via...6.5 Medium
- olevmedia shortcodesThe olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp...6.5 Medium
- mightymess soundcloud is goldThe soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php...6.1 Medium
- captain-slider project captain-sliderThe captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.6.1 Medium
- arm mbed crypto, mbed tls, debian linux +1 more +3 moreArm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...5.3 Medium
- kibokolabs watuproThe Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.4.3 Medium
- Show moreLoading…