|
223031
|
7.8 |
HIGH
Local
|
bitdefender
|
antivirus_2020
|
An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to…
|
CWE-426
Untrusted Search Path
|
CVE-2019-15295
|
2024-11-21 13:28 |
2019-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223032
|
6.1 |
MEDIUM
Network
|
wp-slimstat
|
slimstat_analytics
|
The wp-slimstat plugin before 4.8.1 for WordPress has XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-15112
|
2024-11-21 13:28 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223033
|
9.8 |
CRITICAL
Network
|
wp_front_end_profile_project
|
wp_front_end_profile
|
The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue.
|
NVD-CWE-noinfo
|
CVE-2019-15111
|
2024-11-21 13:28 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223034
|
6.1 |
MEDIUM
Network
|
wp_front_end_profile_project
|
wp_front_end_profile
|
The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-15110
|
2024-11-21 13:28 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223035
|
6.1 |
MEDIUM
Network
|
stellarwp
|
the_events_calendar
|
The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-15109
|
2024-11-21 13:28 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223036
|
7.8 |
HIGH
Local
|
audiocoding debian
|
freeware_advanced_audio_decoder_2 debian_linux
|
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-15296
|
2024-11-21 13:28 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223037
|
7.8 |
HIGH
Local
|
acdsee
|
photo_studio
|
An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDE_ACDStd!IEP_ShowPlugInDialog+0x000000000023d060.
|
NVD-CWE-noinfo
|
CVE-2019-15293
|
2024-11-21 13:28 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223038
|
4.7 |
MEDIUM
Local
|
linux debian canonical
|
linux_kernel debian_linux ubuntu_linux
|
An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.…
|
CWE-416
Use After Free
|
CVE-2019-15292
|
2024-11-21 13:28 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223039
|
8.8 |
HIGH
Network
|
cformsii_project
|
cformsii
|
The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.
|
CWE-352
Origin Validation Error
|
CVE-2019-15238
|
2024-11-21 13:28 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223040
|
4.6 |
MEDIUM
Physics
|
linux
|
linux_kernel
|
An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop…
|
CWE-476
NULL Pointer Dereference
|
CVE-2019-15291
|
2024-11-21 13:28 |
2019-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|