deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-14951
Published: 2019-08-12
Description: The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-force attacks on the authentication process, which makes it easier for attackers to obtain multimedia-screen access via port 7050 on the cellular network, as demonstrated by a DrivingRestriction method call to uma/jsonrpc/mobile.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://sites.google.com/site/iosappnss/more-vulnerable-apps-and-libraries; https://sites.google.com/site/iosappnss/more-vulnerable-apps-and-libraries
CVE: CVE-2019-12618
Published: 2019-08-12
Description: HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/hashicorp/nomad/issues/5783; https://www.hashicorp.com/blog/category/nomad; https://www.hashicorp.com/blog/hashicorp-nomad-0-9-2
CVE: CVE-2019-13462
Published: 2019-08-12
Description: Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://www.lansweeper.com/forum/yaf_topics33_Announcements.aspx; https://www.nccgroup.trust/uk/our-research/technical-advisory-unauthenticated-sql-injection-in-lansweeper/; https://www.lansweeper.com/forum/yaf_topics33_Announcements.aspx
CVE: CVE-2019-14965
Published: 2019-08-12
Description: An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection (SSTI) issue exists.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/frappe/frappe/compare/v12.0.3...v12.0.4; https://github.com/frappe/frappe/pull/8044; https://github.com/frappe/frappe/pull/8045
CVE: CVE-2019-14966
Published: 2019-08-12
Description: An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/frappe/frappe/compare/v12.0.3...v12.0.4; https://github.com/frappe/frappe/pull/8044; https://github.com/frappe/frappe/pull/8045
CVE: CVE-2019-14967
Published: 2019-08-12
Description: An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/frappe/frappe/compare/v11.1.45...v11.1.46; https://github.com/frappe/frappe/pull/7981; https://github.com/frappe/frappe/releases/tag/v11.1.46
CVE: CVE-2019-14968
Published: 2019-08-12
Description: An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/peacexie/imcat/issues/2; https://github.com/peacexie/imcat/issues/2
CVE: CVE-2019-14969
Published: 2019-08-12
Description: Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders. In addition, the service Netwrix.ADA.StorageAuditService (which writes to that directory) does not perform proper impersonation, and thus the target file will have the same permissions as the invoking process (in this case, granting Authenticated Users full access over the target file). This vulnerability can be triggered by a low-privileged user to perform DLL Hijacking/Binary Planting attacks and ultimately execute code as NT AUTHORITY\SYSTEM with the help of Symbolic Links.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-010.md; https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-010.md
CVE: CVE-2019-13417
Published: 2019-08-12
Description: Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not allowed for the user when field level security (FLS) is activated.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-200
References: https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_0; https://search-guard.com/cve-advisory/; https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_0
CVE: CVE-2019-13418
Published: 2019-08-12
Description: Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311, CWE-129
References: https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_0; https://search-guard.com/cve-advisory/; https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_0
CVE: CVE-2019-14976
Published: 2019-08-12
Description: iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/idreamsoft/iCMS/issues/71; https://github.com/idreamsoft/iCMS/issues/71
CVE: CVE-2019-14359
Published: 2019-08-12
Description: On BC Vault devices, a side channel for the row-based SSD1309 OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to leverage this behavior to recover a data value. In other words, the side channel is relevant only if the attacker has enough control over the device's USB connection to make power-consumption measurements at a time when secret data is displayed. The side channel is not relevant in other circumstances, such as a stolen device that is not currently displaying secret data. NOTE: the vendor's position is that there is no security impact: the only potentially leaked information is the number of characters in the PIN
CVSS Score: 2.4 (LOW)
CWE: CWE-203
References: https://bc-vault.com/2019/08/our-response-to-cve-2019-14359; https://bc-vault.com/2019/08/our-response-to-cve-2019-14359
CVE: CVE-2019-14980
Published: 2019-08-12
Description: In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html; https://github.com/ImageMagick/ImageMagick/commit/c5d012a46ae22be9444326aa37969a3f75daa3ba
CVE: CVE-2019-14981
Published: 2019-08-12
Description: In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html; https://github.com/ImageMagick/ImageMagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc
CVE: CVE-2019-14982
Published: 2019-08-12
Description: In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buffer overflow vulnerability and a crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/Exiv2/exiv2/compare/v0.27.2-RC2...v0.27.2; https://github.com/Exiv2/exiv2/issues/960; https://github.com/Exiv2/exiv2/pull/962/commits/e925bc5addd881543fa503470c8a859e112cca62
CVE: CVE-2019-14987
Published: 2019-08-13
Description: Adive Framework through 2.0.7 is affected by XSS in the Create New Table and Create New Navigation Link functions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.sevenlayers.com/index.php/231-adive-framework-2-0-7-xss; https://www.sevenlayers.com/index.php/231-adive-framework-2-0-7-xss
CVE: CVE-2017-18509
Published: 2019-08-13
Description: An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99253eb750fda6a644d5188fb26c43bad8d5a745; https://github.com/torvalds/linux/commit/99253eb750fda6a644d5188fb26c43bad8d5a745
CVE: CVE-2019-14516
Published: 2019-08-13
Description: The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks against requests for FAQs or Help.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://github.com/fs0c131y/ConPresentations/blob/master/AppSecVillageDefcon27.mAadhaar.pdf; https://play.google.com/store/apps/details?id=in.gov.uidai.mAadhaarPlus&hl=en_US; https://github.com/fs0c131y/ConPresentations/blob/master/AppSecVillageDefcon27.mAadhaar.pdf
CVE: CVE-2019-14530
Published: 2019-08-13
Description: An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is readable by the user www-data) from server storage. If the requested file is writable for the www-data user and the directory /var/www/openemr/sites/default/documents/cqm_qrda/ exists, it will be deleted from server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/163215/OpenEMR-5.0.1.7-Path-Traversal.html; http://packetstormsecurity.com/files/163375/OpenEMR-5.0.1.7-Path-Traversal.html; https://github.com/Hacker5preme/Exploits/tree/main/CVE-2019-14530-Exploit
CVE: CVE-2019-14659
Published: 2019-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-13419
Published: 2019-08-13
Description: Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311, CWE-200
References: https://docs.search-guard.com/6.x-23/changelog-searchguard-6-x-23_1; https://search-guard.com/cve-advisory/; https://docs.search-guard.com/6.x-23/changelog-searchguard-6-x-23_1
CVE: CVE-2019-13420
Published: 2019-08-13
Description: Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-208, CWE-203
References: https://docs.search-guard.com/6.x-21/changelog-searchguard-6-x-21_0; https://search-guard.com/cve-advisory/; https://docs.search-guard.com/6.x-21/changelog-searchguard-6-x-21_0
CVE: CVE-2019-5681
Published: 2019-08-13
Description: NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, denial of service, or information disclosure.
CVSS Score: 7.8 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4804; https://nvidia.custhelp.com/app/answers/detail/a_id/4804
CVE: CVE-2019-8448
Published: 2019-08-13
Description: The login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2 allows remote attackers to enumerate usernames via an information disclosure vulnerability.
CVSS Score: 5.3 (MEDIUM)
References: https://jira.atlassian.com/browse/JRASERVER-69797; https://jira.atlassian.com/browse/JRASERVER-69797
CVE: CVE-2012-6713
Published: 2019-08-13
Description: The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/job-manager/#developers; https://wordpress.org/plugins/job-manager/#developers
CVE: CVE-2013-7475
Published: 2019-08-13
Description: The contact-form-plugin plugin before 3.52 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/contact-form-plugin/#developers; https://wordpress.org/plugins/contact-form-plugin/#developers
CVE: CVE-2015-9293
Published: 2019-08-13
Description: The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers; https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE: CVE-2015-9294
Published: 2019-08-13
Description: The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers; https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE: CVE-2015-9295
Published: 2019-08-13
Description: The contact-form-plugin plugin before 3.96 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/contact-form-plugin/#developers; https://wordpress.org/plugins/contact-form-plugin/#developers
CVE: CVE-2015-9296
Published: 2019-08-13
Description: The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/download-monitor/#developers; https://wordpress.org/plugins/download-monitor/#developers
CVE: CVE-2015-9297
Published: 2019-08-13
Description: The events-manager plugin before 5.6 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/events-manager/#developers; https://wpvulndb.com/vulnerabilities/9761; https://wordpress.org/plugins/events-manager/#developers
CVE: CVE-2015-9298
Published: 2019-08-13
Description: The events-manager plugin before 5.6 for WordPress has code injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://wordpress.org/plugins/events-manager/#developers; https://wpvulndb.com/vulnerabilities/9761; https://wordpress.org/plugins/events-manager/#developers
CVE: CVE-2015-9299
Published: 2019-08-13
Description: The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/events-manager/#developers; https://wordpress.org/plugins/events-manager/#developers
CVE: CVE-2015-9300
Published: 2019-08-13
Description: The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/events-manager/#developers; https://wordpress.org/plugins/events-manager/#developers
CVE: CVE-2015-9301
Published: 2019-08-13
Description: The liveforms plugin before 3.2.0 for WordPress has SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wordpress.org/plugins/liveforms/#developers; https://wordpress.org/plugins/liveforms/#developers
CVE: CVE-2015-9302
Published: 2019-08-13
Description: The simple-fields plugin before 1.4.11 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/simple-fields/#developers; https://wpvulndb.com/vulnerabilities/8342; https://wordpress.org/plugins/simple-fields/#developers
CVE: CVE-2016-10868
Published: 2019-08-13
Description: The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers; https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE: CVE-2016-10869
Published: 2019-08-13
Description: The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/contact-form-plugin/#developers; https://wordpress.org/plugins/contact-form-plugin/#developers
CVE: CVE-2016-10870
Published: 2019-08-13
Description: The google-language-translator plugin before 5.0.06 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/google-language-translator/#developers; https://wordpress.org/plugins/google-language-translator/#developers
CVE: CVE-2016-10871
Published: 2019-08-13
Description: The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/mailchimp-for-wp/#developers; https://wordpress.org/plugins/mailchimp-for-wp/#developers
CVE: CVE-2017-18489
Published: 2019-08-13
Description: The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/contact-form-7-sms-addon/#developers; https://wordpress.org/plugins/contact-form-7-sms-addon/#developers
CVE: CVE-2017-18490
Published: 2019-08-13
Description: The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/contact-form-multi/#developers; https://wordpress.org/plugins/contact-form-multi/#developers
CVE: CVE-2017-18491
Published: 2019-08-13
Description: The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/contact-form-plugin/#developers; https://wordpress.org/plugins/contact-form-plugin/#developers
CVE: CVE-2017-18492
Published: 2019-08-13
Description: The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/contact-form-to-db/#developers; https://wordpress.org/plugins/contact-form-to-db/#developers
CVE: CVE-2017-18493
Published: 2019-08-13
Description: The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/custom-admin-page/#developers; https://wordpress.org/plugins/custom-admin-page/#developers
CVE: CVE-2017-18494
Published: 2019-08-13
Description: The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/custom-search-plugin/#developers; https://wordpress.org/plugins/custom-search-plugin/#developers
CVE: CVE-2017-18495
Published: 2019-08-13
Description: The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/gravity-forms-sms-notifications/#developers; https://wordpress.org/plugins/gravity-forms-sms-notifications/#developers
CVE: CVE-2017-18496
Published: 2019-08-13
Description: The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/htaccess/#developers; https://wordpress.org/plugins/htaccess/#developers
CVE: CVE-2017-18497
Published: 2019-08-13
Description: The liveforms plugin before 3.4.0 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/liveforms/#developers; https://wordpress.org/plugins/liveforms/#developers
CVE: CVE-2017-18498
Published: 2019-08-13
Description: The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/simple-job-board/#developers; https://wordpress.org/plugins/simple-job-board/#developers
CVE: CVE-2017-18507
Published: 2019-08-13
Description: The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-live-chat-support/#developers; https://wordpress.org/plugins/wp-live-chat-support/#developers
CVE: CVE-2018-20963
Published: 2019-08-13
Description: The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/contact-form-to-email/#developers; https://wordpress.org/plugins/contact-form-to-email/#developers
CVE: CVE-2018-20964
Published: 2019-08-13
Description: The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/contact-form-to-email/#developers; https://wordpress.org/plugins/contact-form-to-email/#developers
CVE: CVE-2016-10866
Published: 2019-08-13
Description: The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers; https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE: CVE-2016-10867
Published: 2019-08-13
Description: The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers; https://wpvulndb.com/vulnerabilities/9736; https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE: CVE-2017-18487
Published: 2019-08-13
Description: The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/adsense-plugin/#developers; https://wordpress.org/plugins/adsense-plugin/#developers
CVE: CVE-2017-18488
Published: 2019-08-13
Description: The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/backup/#developers; https://wordpress.org/plugins/backup/#developers
CVE: CVE-2019-14988
Published: 2019-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9512. Reason: This candidate is a reservation duplicate of CVE-2019-9512. Notes: All CVE users should reference CVE-2019-9512 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-14989
Published: 2019-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9513. Reason: This candidate is a reservation duplicate of CVE-2019-9513. Notes: All CVE users should reference CVE-2019-9513 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-14990
Published: 2019-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9514. Reason: This candidate is a reservation duplicate of CVE-2019-9514. Notes: All CVE users should reference CVE-2019-9514 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-14991
Published: 2019-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9515. Reason: This candidate is a reservation duplicate of CVE-2019-9515. Notes: All CVE users should reference CVE-2019-9515 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-14992
Published: 2019-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9518. Reason: This candidate is a reservation duplicate of CVE-2019-9518. Notes: All CVE users should reference CVE-2019-9518 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage