CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- dlink dir-806 firmwareD-Link DIR-806 devices allow remote attackers to execute arbitrary shell commands via a trailing...9.8 Critical
- facebook hhvmInsufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension...9.8 Critical
- facebook hhvmInsufficient boundary checks when processing the JPEG APP12 block marker in the GD extension...9.8 Critical
- php ext-httpA type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl...9.8 Critical
- document foundation libreoffice, opensuse leap +1 moreWindows 8.3 path equivalence handling flaw allows LibreLogo script execution9.8 Critical
- airbrake rubyAirbrake keys not being filtered9.8 Critical
- sapplica sentrifugoSentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator...8.8 High
- opensc project openscAn issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card...7.5 High
- python, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 High
- libslirp project libslirp, qemu +1 morelibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 High
- changehealthcare cardiology firmware, mckesson horizon cardiology firmware +1 moreA vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions...7.8 High
- sahipro sahi proAn issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. TestRunner_Non_distributed (and...9.8 Critical
- alfrescoAn issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The...6.1 Medium
- xiaoyi yi m1 mirrorless camera firmwareAn exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE)...8.8 High
- ca technologies client automation, workload automation ae, broadcom ca client automation +1 more +3 moreAn access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and...9.8 Critical
- google androidNVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can...7.8 High
- bd pyxis enterprise server, pyxis es +1 moreIn Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server...8.8 High
- generator-rs project generator-rsUninitialized memory use in generator7.5 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +3 more +5 moreUnsafe URL assembly flaw in allowed script location check7.8 High
- exim, debian linux +1 moreExim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing...9.8 Critical
- google androidIn binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write...7.8 High
- google androidIn ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write...7.8 High
- google androidIn readArgumentList of zygote.java in Android 10, there is a possible command injection due to...7.8 High
- google androidIn ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0...5.5 Medium
- google androidIn NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible...5.5 Medium
- google androidIn rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out...7.8 High
- google androidIn GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is...7.8 High
- google androidIn isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible...8.8 High
- google androidIn ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there...7.8 High
- google androidIn Google Assistant in Android 9, there is a possible permissions bypass that allows the...5.5 Medium
- google androidIn checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check...7.8 High
- google androidIn SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9...7.8 High
- google androidIn execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible...7.8 High
- alfrescoAn issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated,...9.8 Critical
- alfrescoAn issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple...7.2 High
- fusionpbxFusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious...8.8 High
- estrongs es file explorer file managerThe master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for...7.5 High
- diffplug eclipse-cdt, eclipse-groovy, eclipse-wtp +2 moreIncorrect Resource Transfer Between Spheres in eclipse-wtp5.9 Medium
- canon printThe ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for...5.5 Medium
- jetbrains teamcityJetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it...6.1 Medium
- valvesoftware counter-strike\In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe...5.3 Medium
- totaljs total.js cmsTotal.js CMS Path Traversal8.8 High
- totaljs total.js cmsTotal.js CMS Unauthorized Access8.8 High
- totaljs total.js cmsTotal.js CMS RCE Vulnerability9.9 Critical
- totaljs total.js cmsAn issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple...6.5 Medium
- eng knowageIn Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the...9.8 Critical
- knowage-suite knowageIn Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the...5.3 Medium
- mapsolutions intramapsA SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL...7.5 High
- symphonyextensions rich text formatterThe Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an...9.8 Critical
- knowage-suite knowageIn Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user...4.9 Medium
- Show moreLoading…