CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

Security Vulnerabilities Published In August 2019

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2019-15842 79 XSS 2019-08-30 2019-09-03
4.3
 None Remote Medium Not required None Partial None
The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS.
2 CVE-2019-15841 352 CSRF 2019-08-30 2019-09-03
6.8
 None Remote Medium Not required Partial Partial Partial
The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility.
3 CVE-2019-15840 352 CSRF 2019-08-30 2019-09-03
6.8
 None Remote Medium Not required Partial Partial Partial
The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF.
4 CVE-2019-15839 22 Dir. Trav. File Inclusion 2019-08-30 2020-08-24
5.0
 None Remote Low Not required Partial None None
The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.
5 CVE-2019-15838 79 XSS 2019-08-30 2019-09-03
4.3
 None Remote Medium Not required None Partial None
The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789.
6 CVE-2019-15837 79 XSS 2019-08-30 2019-09-03
3.5
 None Remote Medium ??? None Partial None
The webp-express plugin before 0.14.8 for WordPress has stored XSS.
7 CVE-2019-15836 79 XSS 2019-08-30 2019-09-04
3.5
 None Remote Medium ??? None Partial None
The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS.
8 CVE-2019-15835 352 CSRF 2019-08-30 2019-09-04
6.8
 None Remote Medium Not required Partial Partial Partial
The wp-better-permalinks plugin before 3.0.5 for WordPress has CSRF.
9 CVE-2019-15834 352 CSRF 2019-08-30 2019-09-04
6.8
 None Remote Medium Not required Partial Partial Partial
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.
10 CVE-2019-15833 79 XSS 2019-08-30 2023-01-30
4.3
 None Remote Medium Not required None Partial None
The simple-mail-address-encoder plugin before 1.7 for WordPress has reflected XSS.
11 CVE-2019-15832 352 CSRF 2019-08-30 2019-09-03
6.8
 None Remote Medium Not required Partial Partial Partial
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.
12 CVE-2019-15831 352 CSRF 2019-08-30 2019-09-03
6.8
 None Remote Medium Not required Partial Partial Partial
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.
13 CVE-2019-15830 79 XSS 2019-08-30 2019-09-03
3.5
 None Remote Medium ??? None Partial None
The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.
14 CVE-2019-15829 79 XSS 2019-08-30 2019-09-03
3.5
 None Remote Medium ??? None Partial None
The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS.
15 CVE-2019-15828 352 CSRF 2019-08-30 2019-09-05
6.8
 None Remote Medium Not required Partial Partial Partial
The one-click-ssl plugin before 1.4.7 for WordPress has CSRF.
16 CVE-2019-15827 79 XSS 2019-08-30 2019-09-03
3.5
 None Remote Medium ??? None Partial None
The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.
17 CVE-2019-15826 Bypass 2019-08-30 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.
18 CVE-2019-15825 Bypass 2019-08-30 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass.
19 CVE-2019-15824 Bypass 2019-08-30 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass.
20 CVE-2019-15823 Bypass 2019-08-30 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.
21 CVE-2019-15822 22 Dir. Trav. 2019-08-30 2019-09-03
7.5
 None Remote Low Not required Partial Partial Partial
The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal.
22 CVE-2019-15821 2019-08-30 2020-08-24
5.0
 None Remote Low Not required None Partial None
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.
23 CVE-2019-15820 601 2019-08-30 2019-09-04
5.8
 None Remote Medium Not required Partial Partial None
The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmi_save_settings authentication.
24 CVE-2019-15819 306 2019-08-30 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication.
25 CVE-2019-15818 601 2019-08-30 2019-09-05
5.8
 None Remote Medium Not required Partial Partial None
The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no requirement for authentication for action=bulk301export or action=bulk301clearlist.
26 CVE-2019-15817 79 XSS 2019-08-30 2019-09-03
4.3
 None Remote Medium Not required None Partial None
The easy-property-listings plugin before 3.4 for WordPress has XSS.
27 CVE-2019-15816 79 XSS 2019-08-30 2020-08-24
5.0
 None Remote Low Not required None Partial None
The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions.
28 CVE-2019-15811 79 XSS 2019-08-29 2019-09-03
4.3
 None Remote Medium Not required None Partial None
In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS.
29 CVE-2019-15807 401 DoS 2019-08-29 2020-08-24
4.7
 None Local Medium Not required None None Complete
In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.
30 CVE-2019-15806 326 Bypass 2019-08-29 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/basic_sett.html. Any user connected to the Wi-Fi can exploit this.
31 CVE-2019-15805 326 Bypass 2019-08-29 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/login.html. Any user connected to the Wi-Fi can exploit this.
32 CVE-2019-15788 190 Overflow 2019-08-29 2019-09-03
7.5
 None Remote Low Not required Partial Partial Partial
Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp.
33 CVE-2019-15787 190 Overflow 2019-08-29 2019-09-04
7.8
 None Remote Low Not required None None Complete
libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic.
34 CVE-2019-15786 119 Overflow 2019-08-29 2019-09-03
7.5
 None Remote Low Not required Partial Partial Partial
ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket.
35 CVE-2019-15785 119 Overflow 2019-08-29 2020-01-13
7.5
 None Remote Low Not required Partial Partial Partial
FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
36 CVE-2019-15784 129 Overflow 2019-08-29 2020-08-24
7.5
 None Remote Low Not required Partial Partial Partial
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
37 CVE-2019-15783 119 Overflow 2019-08-29 2019-09-03
7.5
 None Remote Low Not required Partial Partial Partial
Lute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc.
38 CVE-2019-15782 79 XSS 2019-08-29 2019-09-25
4.3
 None Remote Medium Not required None Partial None
WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.
39 CVE-2019-15781 352 CSRF 2019-08-29 2019-08-30
6.8
 None Remote Medium Not required Partial Partial Partial
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.
40 CVE-2019-15780 502 2019-08-29 2022-04-18
7.5
 None Remote Low Not required Partial Partial Partial
The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.
41 CVE-2019-15779 352 2019-08-29 2019-09-03
6.8
 None Remote Medium Not required Partial Partial Partial
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.
42 CVE-2019-15778 79 XSS 2019-08-29 2019-09-03
3.5
 None Remote Medium ??? None Partial None
The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.
43 CVE-2019-15777 79 XSS 2019-08-29 2019-09-03
3.5
 None Remote Medium ??? None Partial None
The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_email= XSS.
44 CVE-2019-15776 601 2019-08-29 2019-09-04
5.8
 None Remote Medium Not required Partial Partial None
The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file.
45 CVE-2019-15775 601 2019-08-29 2019-09-04
5.8
 None Remote Medium Not required Partial Partial None
The nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
46 CVE-2019-15774 601 2019-08-29 2019-09-04
5.8
 None Remote Medium Not required Partial Partial None
The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
47 CVE-2019-15773 601 2019-08-29 2019-09-04
5.8
 None Remote Medium Not required Partial Partial None
The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
48 CVE-2019-15772 601 2019-08-29 2019-09-04
5.8
 None Remote Medium Not required Partial Partial None
The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
49 CVE-2019-15771 601 2019-08-29 2019-09-04
5.8
 None Remote Medium Not required Partial Partial None
The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
50 CVE-2019-15770 352 2019-08-29 2019-09-04
6.8
 None Remote Medium Not required Partial Partial Partial
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.
Total number of vulnerabilities : 2004   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.