CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- epignosishq efront lmsAn exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS,...6.5 Medium
- epignosishq efront lmsA code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web...8.8 High
- nagios xiNagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to...8.8 High
- eng knowageIn Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows...5.3 Medium
- smanos w100 firmwareSmanos W100 1.0.0 devices have Insecure Permissions, exploitable by an attacker on the same Wi-Fi...6.5 Medium
- bitcoin coreIn Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it...7.5 High
- blynk blynk-libraryAn exploitable information disclosure vulnerability exists in the packet-parsing functionality of...5.3 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreOpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in...6.4 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreOpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string...6.4 Medium
- ffmpegFFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in...8.8 High
- eventum project eventumController/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data...9.8 Critical
- opencv, debian linux, opensuse leap +2 moreDivide By Zero in OpenCV.5.9 Medium
- hanwha-security srn-1673s firmware, srn-472s firmware, srn-873s firmware +2 moreAn issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and...7.5 High
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for...5.9 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect...5.3 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8...5.4 Medium
- pengutronix bareboxPengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net...9.8 Critical
- pengutronix bareboxPengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs...9.8 Critical
- dasanzhone znid gpon 2426a eu firmwareMultiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU...6.1 Medium
- uclouvain openjpeg, debian linux +1 moreOpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.8.8 High
shadowSUSE,util-linuxSUSE,util-linux-systemdSUSE +2 moreSecurity update for util-linux and shadowNo score- freedesktop popplerPoppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc.8.8 High
- cisco webex teamsCisco Webex Teams Logging Feature Command Execution Vulnerability7.5 High
- cisco industrial network director, network level service +1 moreCisco Industrial Network Director Configuration Data Information Disclosure Vulnerability7.5 High
- cisco content security management appliance (sma), content security management appliance +1 moreCisco Content Security Management Appliance Information Disclosure Vulnerability4.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability6.1 Medium
- cisco jabber for mac, jabber +1 moreCisco Jabber Client Framework for Mac Code Execution Vulnerability6.7 Medium
- cisco finesseCisco Finesse Request Processing Server-Side Request Forgery Vulnerability5.3 Medium
- cisco unified contact center expressCisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability5.3 Medium
- linux kernel, opensuse leap +1 moreAn issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the...7.8 High
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the...7.8 High
- linux kernelAn issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the...7.8 High
- espressif esp-idf, arduino-esp32, esp8266 nonos sdk +2 moreThe EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0...6.5 Medium
- tiktokThe TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted...6.5 Medium
- instagram-php-api project instagram-php-api, userproplugin user pro +1 moreCosenary Instagram-PHP-API contains reflected XSS vulnerability6.1 Medium
- debian linux, linux kernel, opensuse leap +2 moreAn issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when...7.0 High
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c...7.8 High
- linux kernel, opensuse leap +1 moreAn issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a...3.3 Low
- linux kernel, opensuse leap +1 moreAn issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a...4.3 Medium
- linux kernel, opensuse leap +1 moreAn issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when...4.7 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4,...7.5 High
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be...8.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreSimilar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4,...9.4 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when...5.3 Medium
- f5 container ingress service, redhat openshift +1 moreOn version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes...4.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing...7.5 High
- Show moreLoading…