CVE Vulnerability Database
Search and browse 394,640 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
17,305 records from 2019Clear filters
- CVE-2014-4558Medium 6.1Dec 27, 2019Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.
- CVE-2014-4548Medium 6.1Dec 27, 2019Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter.
- CVE-2014-4544Medium 6.1Dec 27, 2019Cross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php.
- CVE-2014-4539Medium 6.1Dec 27, 2019Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.
- CVE-2013-5027Critical 9.8Dec 27, 2019Collabtive 1.0 has incorrect access control
- CVE-2007-0158Critical 9.8Dec 27, 2019thttpd 2007 has buffer underflow.
- CVE-2014-4592Medium 6.1Dec 27, 2019Cross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
- CVE-2014-4519Medium 6.1Dec 27, 2019Cross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 'page' parameter.
- CVE-2013-4985High 7.5Dec 27, 2019Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
- CVE-2013-4982Critical 9.8Dec 27, 2019AVTECH AVN801 DVR has a security bypass via the administration login captcha
- CVE-2013-4976Critical 9.8Dec 27, 2019Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials
- CVE-2013-4975High 8.8Dec 27, 2019Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
- CVE-2013-4868Medium 5.3Dec 27, 2019Karotz API 12.07.19.00: Session Token Information Disclosure
- CVE-2013-4867Medium 6.3Dec 27, 2019Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
- CVE-2013-4859High 8.1Dec 27, 2019INSTEON Hub 2242-222 lacks Web and API authentication
- CVE-2013-4796High 8.8Dec 27, 2019ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request
- CVE-2013-4764Medium 4.3Dec 27, 2019Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
- CVE-2013-4763Medium 4.6Dec 27, 2019Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.
- CVE-2013-4743Critical 9.8Dec 27, 2019Static HTTP Server 1.0 has a Local Overflow
- CVE-2013-4692Medium 6.1Dec 27, 2019Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
- CVE-2013-4621Critical 9.8Dec 27, 2019Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities
- CVE-2019-16896High 7.8Dec 27, 2019In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality.
- CVE-2013-4695High 7.8Dec 27, 2019Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
- CVE-2013-4693Medium 6.1Dec 27, 2019WordPress Xorbin Digital Flash Clock 1.0 has XSS
- CVE-2013-4691Medium 6.1Dec 27, 2019Sencha Labs Connect has XSS with connect.methodOverride()