National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database



The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.
 
Last 20 Scored Vulnerability IDs & Summaries CVSS Severity
  • CVE-2019-15047 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4_BitReader::SkipBits at Core/Ap4Utils.cpp.
    Published: August 14, 2019; 12:15:12 PM -04:00

  • CVE-2019-15049 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_Dec3Atom class at Core/Ap4Dec3Atom.cpp.
    Published: August 14, 2019; 12:15:12 PM -04:00

  • CVE-2019-15048 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer overflow in the AP4_RtpAtom class at Core/Ap4RtpAtom.cpp.
    Published: August 14, 2019; 12:15:12 PM -04:00

  • CVE-2019-15050 An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4_AvccAtom class at Core/Ap4AvccAtom.cpp.
    Published: August 14, 2019; 12:15:12 PM -04:00

  • CVE-2019-15120 The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.
    Published: August 16, 2019; 11:15:11 AM -04:00

  • CVE-2019-5237 Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability. Successful exploitation may cause the attacker to execute code and read/write information.
    Published: August 08, 2019; 01:15:11 PM -04:00

  • CVE-2019-1150 A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1144, CVE-2019-1145, CVE... read CVE-2019-1150
    Published: August 14, 2019; 05:15:14 PM -04:00

    V3: 8.8 HIGH
    V2: 9.3 HIGH

  • CVE-2019-14948 The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.
    Published: August 12, 2019; 11:15:12 AM -04:00

  • CVE-2019-1151 A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1144, CVE-2019-1145, CVE... read CVE-2019-1151
    Published: August 14, 2019; 05:15:14 PM -04:00

    V3: 8.8 HIGH
    V2: 9.3 HIGH

  • CVE-2019-1144 A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1145, CVE-2019-1149, CVE... read CVE-2019-1144
    Published: August 14, 2019; 05:15:14 PM -04:00

    V3: 8.8 HIGH
    V2: 9.3 HIGH

  • CVE-2017-18515 The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.
    Published: August 14, 2019; 10:15:14 AM -04:00

  • CVE-2017-18548 The note-press plugin before 0.1.2 for WordPress has SQL injection.
    Published: August 16, 2019; 10:15:09 AM -04:00

  • CVE-2015-9306 The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS.
    Published: August 12, 2019; 11:15:11 AM -04:00

  • CVE-2015-9303 The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.
    Published: August 12, 2019; 12:15:12 PM -04:00

  • CVE-2016-10878 The wp-google-map-plugin plugin before 3.1.2 for WordPress has XSS.
    Published: August 12, 2019; 11:15:11 AM -04:00

  • CVE-2019-1152 A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1144, CVE-2019-1145, CVE... read CVE-2019-1152
    Published: August 14, 2019; 05:15:15 PM -04:00

    V3: 8.8 HIGH
    V2: 9.3 HIGH

  • CVE-2017-18499 The simple-membership plugin before 3.5.7 for WordPress has XSS.
    Published: August 12, 2019; 12:15:12 PM -04:00

  • CVE-2017-18506 The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
    Published: August 12, 2019; 11:15:11 AM -04:00

  • CVE-2019-5223 PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution.
    Published: August 13, 2019; 05:15:12 PM -04:00

  • CVE-2019-14221 1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.
    Published: August 08, 2019; 09:15:12 AM -04:00