2019

The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.

The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.

The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.

The my-wp-translate plugin before 1.0.4 for WordPress has XSS.

The wp-all-import plugin before 3.4.6 for WordPress has XSS.

The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.

The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.

The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.

The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.

The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests.

The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=unins

The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.

The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.

The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.

The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.

The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.

The user-domain-whitelist plugin before 1.5 for WordPress has CSRF.

The user-access-manager plugin before 1.2 for WordPress has CSRF.

An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB

The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of

The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker

plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.

OX App Suite 7.10.1 and earlier has Insecure Permissions.

OX App Suite 7.10.0 to 7.10.2 allows XSS.

OX App Suite 7.10.1 allows Content Spoofing.

Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.

An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user with local access to only

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrect

FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead t

Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.

Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the

FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker

FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other m

In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression

The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor i

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB

An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in

An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card

An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in

An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the