Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-668
Total 688 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-16518 1 Vandyvape 2 Swell Kit Mod, Swell Kit Mod Firmware 2019-09-23 3.3 LOW 4.3 MEDIUM
An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy (BLE) packets that specify large power or voltage values.
CVE-2016-11010 1 Usabilitydynamics 1 Wp-invoice 2019-09-20 5.0 MEDIUM 5.3 MEDIUM
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.
CVE-2016-11009 1 Usabilitydynamics 1 Wp-invoice 2019-09-20 5.0 MEDIUM 5.3 MEDIUM
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.
CVE-2016-11007 1 Usabilitydynamics 1 Wp-invoice 2019-09-20 5.0 MEDIUM 5.3 MEDIUM
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.
CVE-2016-11008 1 Usabilitydynamics 1 Wp-invoice 2019-09-20 5.0 MEDIUM 5.3 MEDIUM
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.
CVE-2016-11006 1 Usabilitydynamics 1 Wp-invoice 2019-09-20 5.0 MEDIUM 5.3 MEDIUM
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.
CVE-2016-10840 1 Cpanel 1 Cpanel 2019-08-12 9.0 HIGH 8.8 HIGH
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).
CVE-2018-20947 1 Cpanel 1 Cpanel 2019-08-08 2.1 LOW 5.5 MEDIUM
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).