# CVEs published 2019-09-20

77 CVEs were published on September 20, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2019-6145](https://cve.now/CVE-2019-6145.md): Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. (no CVSS, Forcepoint VPN Client for Windows)
- [CVE-2019-6649](https://cve.now/CVE-2019-6649.md): F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manage (no CVSS, F5 Networks BIG-IP, Enterprise Manager)
- [CVE-2019-6650](https://cve.now/CVE-2019-6650.md): F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensit (no CVSS, F5 Networks BIG-IP ASM)
- [CVE-2014-10397](https://cve.now/CVE-2014-10397.md): The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php. (no CVSS)
- [CVE-2014-10396](https://cve.now/CVE-2014-10396.md): The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php. (no CVSS)
- [CVE-2015-9406](https://cve.now/CVE-2015-9406.md): Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (no CVSS)
- [CVE-2019-15138](https://cve.now/CVE-2019-15138.md): The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/ (no CVSS, html-pdf)
- [CVE-2019-11280](https://cve.now/CVE-2019-11280.md): Privilege escalation through the invitations service (CVSS 8.8, Pivotal Application Service)
- [CVE-2019-14814](https://cve.now/CVE-2019-14814.md): There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, tha (CVSS 5.5, Linux kernel)
- [CVE-2019-14816](https://cve.now/CVE-2019-14816.md): There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allo (CVSS 5.5, Linux kernel)
- [CVE-2019-11327](https://cve.now/CVE-2019-11327.md): An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. (no CVSS)
- [CVE-2019-16645](https://cve.now/CVE-2019-16645.md): An issue was discovered in Embedthis GoAhead 2.5.0. (no CVSS)
- [CVE-2019-11326](https://cve.now/CVE-2019-11326.md): An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. (no CVSS)
- [CVE-2018-17789](https://cve.now/CVE-2018-17789.md): Prospecta Master Data Online (MDO) allows CSRF. (no CVSS)
- [CVE-2019-5521](https://cve.now/CVE-2019-5521.md): VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2018-11200](https://cve.now/CVE-2018-11200.md): An issue was discovered in Mautic 2.13.1. (no CVSS, mautic/core)
- [CVE-2019-4565](https://cve.now/CVE-2019-4565.md): IBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong passwords by default, which makes it easier (CVSS 5.9, IBM Security Key Lifecycle Manager)
- [CVE-2019-4505](https://cve.now/CVE-2019-4505.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, ca (CVSS 3.7, IBM WebSphere Application Server)
- [CVE-2019-16534](https://cve.now/CVE-2019-16534.md): On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. (no CVSS)
- [CVE-2019-16533](https://cve.now/CVE-2019-16533.md): On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. (no CVSS)
- [CVE-2015-9408](https://cve.now/CVE-2015-9408.md): The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS. (no CVSS)
- [CVE-2015-9407](https://cve.now/CVE-2015-9407.md): The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS. (no CVSS)
- [CVE-2019-16644](https://cve.now/CVE-2019-16644.md): App\\Home\\Controller\\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring. (no CVSS)
- [CVE-2015-9405](https://cve.now/CVE-2015-9405.md): The wp-piwik plugin before 1.0.5 for WordPress has XSS. (no CVSS)
- [CVE-2015-9404](https://cve.now/CVE-2015-9404.md): The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo\_keywords XSS. (no CVSS)
- [CVE-2015-9403](https://cve.now/CVE-2015-9403.md): The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo\_location XSS. (no CVSS)
- [CVE-2015-9402](https://cve.now/CVE-2015-9402.md): The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload. (no CVSS)
- [CVE-2015-9401](https://cve.now/CVE-2015-9401.md): The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php edit\_style id XSS. (no CVSS)
- [CVE-2015-9400](https://cve.now/CVE-2015-9400.md): The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection. (no CVSS)
- [CVE-2015-9399](https://cve.now/CVE-2015-9399.md): The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph\_trend.php type SQL injection. (no CVSS)
- [CVE-2015-9398](https://cve.now/CVE-2015-9398.md): The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection. (no CVSS)
- [CVE-2015-9397](https://cve.now/CVE-2015-9397.md): The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS. (no CVSS)
- [CVE-2019-16643](https://cve.now/CVE-2019-16643.md): An issue was discovered in ZrLog 2.1.1. (no CVSS)
- [CVE-2015-9396](https://cve.now/CVE-2015-9396.md): The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS. (no CVSS)
- [CVE-2015-9395](https://cve.now/CVE-2015-9395.md): The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action. (no CVSS)
- [CVE-2015-9394](https://cve.now/CVE-2015-9394.md): The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package\_add\_new to wp-admin/admin-ajax.php. (no CVSS)
- [CVE-2015-9393](https://cve.now/CVE-2015-9393.md): The users-ultra plugin before 1.5.63 for WordPress has XSS via the p\_desc parameter. (no CVSS)
- [CVE-2015-9392](https://cve.now/CVE-2015-9392.md): The users-ultra plugin before 1.5.63 for WordPress has XSS via the p\_name parameter. (no CVSS)
- [CVE-2015-9391](https://cve.now/CVE-2015-9391.md): The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter. (no CVSS)
- [CVE-2015-9390](https://cve.now/CVE-2015-9390.md): The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp\_ajax functions are mishandled. (no CVSS)
- [CVE-2015-9389](https://cve.now/CVE-2015-9389.md): The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name. (no CVSS)
- [CVE-2015-9388](https://cve.now/CVE-2015-9388.md): The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS. (no CVSS)
- [CVE-2015-9386](https://cve.now/CVE-2015-9386.md): The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation. (no CVSS)
- [CVE-2015-9387](https://cve.now/CVE-2015-9387.md): The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF. (no CVSS)
- [CVE-2015-9385](https://cve.now/CVE-2015-9385.md): The quotes-and-tips plugin before 1.20 for WordPress has XSS. (no CVSS)
- [CVE-2015-9384](https://cve.now/CVE-2015-9384.md): The relevant plugin before 1.0.8 for WordPress has XSS. (no CVSS)
- [CVE-2016-11013](https://cve.now/CVE-2016-11013.md): The wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS. (no CVSS)
- [CVE-2016-11012](https://cve.now/CVE-2016-11012.md): The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS. (no CVSS)
- [CVE-2016-11011](https://cve.now/CVE-2016-11011.md): The wp-invoice plugin before 4.1.1 for WordPress has wpi\_update\_user\_option privilege escalation. (no CVSS)
- [CVE-2016-11010](https://cve.now/CVE-2016-11010.md): The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi\_twocheckout payer metadata updates. (no CVSS)
- [CVE-2016-11009](https://cve.now/CVE-2016-11009.md): The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi\_interkassa payer metadata updates. (no CVSS)
- [CVE-2016-11008](https://cve.now/CVE-2016-11008.md): The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi\_paypal payer metadata updates. (no CVSS)
- [CVE-2016-11007](https://cve.now/CVE-2016-11007.md): The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi\_user\_id for invoice retrieval. (no CVSS)
- [CVE-2016-11006](https://cve.now/CVE-2016-11006.md): The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin\_init settings changes. (no CVSS)
- [CVE-2016-11005](https://cve.now/CVE-2016-11005.md): The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client\_id= XSS. (no CVSS)
- [CVE-2016-11004](https://cve.now/CVE-2016-11004.md): The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation. (no CVSS)
- [CVE-2016-11002](https://cve.now/CVE-2016-11002.md): The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation. (no CVSS)
- [CVE-2016-11003](https://cve.now/CVE-2016-11003.md): The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation. (no CVSS)
- [CVE-2016-11001](https://cve.now/CVE-2016-11001.md): The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field. (no CVSS)
- [CVE-2016-11000](https://cve.now/CVE-2016-11000.md): The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export\_type\_name parameter. (no CVSS)
- [CVE-2019-16642](https://cve.now/CVE-2019-16642.md): App\\Mobile\\Controller\\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring. (no CVSS)
- [CVE-2016-10999](https://cve.now/CVE-2016-10999.md): The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter. (no CVSS)
- [CVE-2016-10998](https://cve.now/CVE-2016-10998.md): The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS. (no CVSS)
- [CVE-2016-10997](https://cve.now/CVE-2016-10997.md): The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php. (no CVSS)
- [CVE-2016-10996](https://cve.now/CVE-2016-10996.md): The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak. (no CVSS)
- [CVE-2019-15089](https://cve.now/CVE-2019-15089.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-15088](https://cve.now/CVE-2019-15088.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-15087](https://cve.now/CVE-2019-15087.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-15086](https://cve.now/CVE-2019-15086.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-15085](https://cve.now/CVE-2019-15085.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-14916](https://cve.now/CVE-2019-14916.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-14915](https://cve.now/CVE-2019-14915.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-14914](https://cve.now/CVE-2019-14914.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-14913](https://cve.now/CVE-2019-14913.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-14912](https://cve.now/CVE-2019-14912.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-14911](https://cve.now/CVE-2019-14911.md): An issue was discovered in PRiSE adAS 1.7.0. (no CVSS)
- [CVE-2019-16531](https://cve.now/CVE-2019-16531.md): LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.