CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur while manipulating video elements if the body is freed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreSome HTML elements, such as <title> and <textarea>, can contain literal angle...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreNavigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft...3.7 Low
- mozilla firefox, firefox esr, thunderbird +2 moreA same-origin policy violation occurs allowing the theft of cross-origin images through a...6.5 Medium
- mozilla firefoxA compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS)...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 68,...8.8 High
- mozilla firefox, firefox esr, opensuse leap +2 moreIf a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes...6.3 Medium
- mozilla firefoxIf a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any...5.3 Medium
- mozilla firefox, firefox esr, opensuse leap +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 68 and...8.8 High
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 68. Some...9.8 Critical
- nagios log serverNagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.6.1 Medium
- varnish-software varnish cache, varnish cache project cache, debian linux +2 moreAn issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An...7.5 High
- statichttpserver project statichttpserverPath Traversal in statichttpserver5.3 Medium
- amd zu11eg firmware, zu15eg firmware, zu17eg firmware +38 more +40 moreA weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an...5.5 Medium
- larvit larvitbaseUnintended Require in larvitbase-api7.5 High
- sonatype nexus repository managerOS Command Injection in Nexus Yum Repository Plugin8.8 High
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreA stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA)...4.8 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreA reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity...6.1 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreA stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator ...4.8 Medium
- lenovo xclarity administrator (lxca), xclarity integrator (lxci) for microsoft system center, xclarity integrator (lxci) for vmware vcenter +2 more +4 moreAn XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity...5.3 Medium
- abus secvest wireless alarm system fuaa50000 firmwareAn issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient...7.5 High
- w3eden download managerThe download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode...6.1 Medium
- dell emc unity operating environment, dell emc unity operating environment, dell emc unityvsa operating environment +3 more +5 moreDell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions...4.7 Medium
- dell emc enterprise copy data management, dell emc enterprise copy data management (ecdm) +1 moreDell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a...6.4 Medium
- naver cloud explorer, naver corporation ndrive +1 moreNDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows...7.5 High
- red hat ansible, debian linux, opensuse backports sle +1 more +3 moreAnsible password prompts could expose passwords6.4 Medium
- metagauss profilegridThe profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote...8.8 High
- wpbrigade loginpressThe LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.4.3 Medium
- wpbrigade loginpressThe LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.9.8 Critical
- scriptsbundle carspotThe CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.5.4 Medium
- jobcareer project jobcareerThe JobCareer theme before 2.5.1 for WordPress has stored XSS.5.4 Medium
- wpaffiliatemanager affiliates managerThe affiliates-manager plugin before 2.6.6 for WordPress has CSRF.8.8 High
- omaksolutions slick-popupThe slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the...8.8 High
- crelly slider project sliderThe crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file...8.8 High
- holest breadcrumbs by menuThe breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.8.8 High
- holest breadcrumbs by menuThe breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.6.1 Medium
- grafanaIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 High
- convertplug convertplusThe ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the...7.5 High
- glyphandcog xpdfreaderXpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from...5.5 Medium
- webcraftic woody ad snippetsadmin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for...8.8 High
- systemd project systemd, fedoraproject fedora, redhat enterprise linux +11 more +13 moreIn systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by...4.4 Medium
- samba, canonical ubuntu linux, debian linux +2 moreA flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x...6.5 Medium
- freetype, canonical ubuntu linux, debian linux +2 moreFreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.6.5 Medium
- freetype, debian linux +1 moreFreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because...6.5 Medium
- freetype, debian linux +1 moreFreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.8.8 High
- gnu gcc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple...7.5 High
- renderdocs-rs project renderdocs-rsImproper Input Validation in renderdoc9.8 Critical
NetworkManagerSUSERecommended update for NetworkManagerNo scorepumpDebianpump - security updateNo score- once cell project cellImproper Input Validation in once_cell7.5 High
- Show moreLoading…