CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moredrivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue...4.1 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moredrivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the...4.7 Medium
- py-lmdb project py-lmdbpy-lmdb Invalid write operation9.8 Critical
- py-lmdb project py-lmdbpy-lmdb Invalid write operation9.8 Critical
- py-lmdb project py-lmdbLMDB invalid write7.5 High
- py-lmdb project py-lmdbpy-lmdb Invalid write operation9.8 Critical
- py-lmdb project py-lmdbpy-lmdb Divide by Zero interruptions7.5 High
- mcafee web gateway, mcafee, llc mcafee web gateway (mwg), mcafee active response +2 more +4 moreMWG scanners updated to address CVE-2019-95177.5 High
- mcafee web gateway, mcafee, llc mcafee web gateway (mwg), mcafee active response +2 more +4 moreMWG scanners updated to address CVE-2019-95115.3 Medium
- atlassian jira, jira server +1 moreThe /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote...6.5 Medium
- atlassian jira, jira server +1 moreVarious templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0...4.8 Medium
- atlassian jiraThe /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote...5.3 Medium
- atlassian jira, jira server +1 moreThe Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before...6.5 Medium
- atlassian jira, jira server +1 moreThe AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn...4.3 Medium
- atlassian jira, jira server +1 moreThe FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before...6.1 Medium
- atlassian jira, jira server +1 moreThe /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers...5.3 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows XSS in shortcode previews.6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows reflected XSS in the dashboard.6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp...6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows XSS in post previews by authenticated users.5.4 Medium
- wordpress, debian linux +1 moreIn WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp...6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows XSS in stored comments.6.1 Medium
- esri arcgis enterpriseIn ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame...5.4 Medium
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...7.5 High
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...4.3 Medium
linuxUbuntu,linux-awsUbuntu,linux-aws-hweUbuntu +7 more +9 morelinux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2 regressionNo score- libra coreLibra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes...5.7 Medium
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 Critical
- curl, debian linux, fedoraproject fedora +12 more +14 moreDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 Critical
- auna connect 100 firmware, telestar bobs rock radio firmware, dabman d10 firmware +9 more +11 moreTELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial...9.8 Critical
systemdUbuntusystemd regressionNo score- ttlockTTLock devices do not properly restrict password-reset attempts, leading to incorrect access...8.1 High
- ttlockTTLock devices do not properly block guest access in certain situations where the network...6.5 Medium
- micro focus service managerModifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This...7.5 High
- microfocus service manager, service manager chat server, service manager chat service +2 moreHTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9...7.5 High
- mendixIn Mendix 7.23.5 and earlier, the Excel importer module is vulnerable to SSRF, which allows...5.3 Medium
shadowopenSUSE,util-linuxopenSUSE,python3-libmountopenSUSE +1 more +3 moreSecurity update for util-linux and shadowNo score- vivotek cameraAn authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found.9.8 Critical
- vivotek cameraVIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a...9.8 Critical
- couchbase serverAn issue was discovered in Couchbase Server 5.0.0. Editing bucket settings resets credentials,...9.1 Critical
- couchbase serverAn issue was discovered in Couchbase Server 5.0.0. When creating a new remote cluster reference...7.5 High
- couchbase serverAn issue was discovered in Couchbase Server 4.6.3 and 5.5.0. A JSON document to be stored with...7.5 High
- couchbase serverCouchbase Server 5.1.1 generates insufficiently random numbers. The product hosts many network...9.8 Critical
- couchbase serverAn issue was discovered in Couchbase Server 5.5.0 and 6.0.0. The Eventing debug endpoint...5.3 Medium
- opensslPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 Low
- opensslFork Protection5.3 Medium
- opensslECDSA remote timing attack4.7 Medium
- couchbase serverAn issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0. The Memcached ...5.3 Medium
- sap hanaThe administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute...6.7 Medium
- Show moreLoading…