# CVEs published 2019-09-15

8 CVEs were published on September 15, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-16335](https://cve.now/CVE-2019-16335.md): A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. (no CVSS, com.fasterxml.jackson.core:jackson-databind)
- [CVE-2019-14540](https://cve.now/CVE-2019-14540.md): A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. (no CVSS, com.fasterxml.jackson.core:jackson-databind)
- [CVE-2019-16333](https://cve.now/CVE-2019-16333.md): GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php. (no CVSS)
- [CVE-2019-16334](https://cve.now/CVE-2019-16334.md): In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -\> Add New Category -\> Name field. (no CVSS)
- [CVE-2019-16332](https://cve.now/CVE-2019-16332.md): In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php f (no CVSS)
- [CVE-2019-16320](https://cve.now/CVE-2019-16320.md): Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latit (no CVSS)
- [CVE-2019-16321](https://cve.now/CVE-2019-16321.md): ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH\_INFO. (no CVSS)
- [CVE-2019-16319](https://cve.now/CVE-2019-16319.md): In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-09-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.