CVEs published August 12, 2019
47 CVEs were published on August 12, 2019: 0 critical, 0 high.
- Published
- 47
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 47
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- floragunn Search Guard
- 2
- github.com/hashicorp/nomad
- 1
- mysql
- 1
Medium, low and unrated 47
- CVE-2019-14359On BC Vault devices, a side channel for the row-based SSD1309 OLED display was found.
- CVE-2019-14982In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp.
- CVE-2019-14981In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function.
- CVE-2019-14980In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows a
- CVE-2019-13418Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.floragunn Search Guard
- CVE-2019-14976iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.
- CVE-2019-13417Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not alfloragunn Search Guard
- CVE-2019-14969Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders.
- CVE-2019-14968An issue was discovered in imcat 4.9.
- CVE-2019-14965An issue was discovered in Frappe Framework 10 through 12 before 12.0.4.
- CVE-2019-14966An issue was discovered in Frappe Framework 10 through 12 before 12.0.4.
- CVE-2019-14967An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12.
- CVE-2019-12618HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver.github.com/hashicorp/nomad
- CVE-2019-13462Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.
- CVE-2017-18499The simple-membership plugin before 3.5.7 for WordPress has XSS.
- CVE-2015-9303The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.
- CVE-2017-18500The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
- CVE-2017-18501The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.
- CVE-2017-18502The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
- CVE-2017-18503The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.
- CVE-2017-18504The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.
- CVE-2017-18505The twitter-plugin plugin before 2.55 for WordPress has XSS.
- CVE-2019-14945The ultimate-member plugin before 2.0.54 for WordPress has XSS.
- CVE-2019-14946The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations.
- CVE-2019-14947The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.
- CVE-2018-20965The ultimate-member plugin before 2.0.4 for WordPress has XSS.
- CVE-2016-10872The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.
- CVE-2015-9304The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.
- CVE-2018-20966The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature.
- CVE-2019-14951The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-forc
- CVE-2017-18506The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
- CVE-2019-14948The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.
- CVE-2019-14949The wp-database-backup plugin before 5.1.2 for WordPress has XSS.
- CVE-2016-10873The wp-database-backup plugin before 4.3.3 for WordPress has XSS.
- CVE-2016-10874The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.
- CVE-2016-10875The wp-database-backup plugin before 4.3.1 for WordPress has XSS.
- CVE-2016-10876The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.
- CVE-2016-10877The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues.
- CVE-2016-10878The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.
- CVE-2015-9305The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions.
- CVE-2019-14950The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.
- CVE-2017-18508The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.
- CVE-2016-10879The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS.
- CVE-2015-9306The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS.
- CVE-2019-14932The Recruitment module in Humanica Humatrix 7 1.0.0.681 and 1.0.0.203 allows remote attackers to access all candidates' information on the w
- CVE-2019-14940In Storage Performance Development Kit (SPDK) before 19.07, a user of a vhost can cause a crash if the target is sent invalid input.
- CVE-2019-14939An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js.mysql