CVEs published September 15, 2019
8 CVEs were published on September 15, 2019: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- com.fasterxml.jackson.core:jackson-databind
- 2
Medium, low and unrated 8
- CVE-2019-16335A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.com.fasterxml.jackson.core:jackson-databind
- CVE-2019-14540A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.com.fasterxml.jackson.core:jackson-databind
- CVE-2019-16333GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php.
- CVE-2019-16334In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -> Add New Category -> Name field.
- CVE-2019-16332In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php f
- CVE-2019-16320Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latit
- CVE-2019-16321ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO.
- CVE-2019-16319In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop.