CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2019-15651

2019-09-03

N/A

9.8 CRITICAL

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for a crafted DER certificate in GetLength_ex.

CVE-2019-15650

2020-08-24

N/A

4.3 MEDIUM

The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes (such as disabling unattended theme updates) because of a nonce check error.

CVE-2019-1565

2020-02-17

N/A

5.4 MEDIUM

The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML.

CVE-2019-15649

2019-08-30

N/A

8.8 HIGH

The insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has insufficient restrictions on file upload.

CVE-2019-15648

2020-08-24

N/A

6.5 MEDIUM

The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a Subscriber.

CVE-2019-15647

2019-08-29

N/A

8.8 HIGH

The groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action=bulk_action_listener remote code execution.

CVE-2019-15646

2019-08-28

N/A

9.8 CRITICAL

The rsvpmaker plugin before 6.2 for WordPress has SQL injection.

CVE-2019-15645

2019-08-28