CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 version 1607 for 32-bit systems +17 more +19 moreOut-of-bounds write7.5 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems +12 more +14 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the...7.8 High
- microsoft exchange server, exchange server 2016, exchange server 2019 +2 moreA denial of service vulnerability exists in Microsoft Exchange Server software when the software...7.5 High
- microsoft visual studio, visual studio 2017, visual studio 2019 +9 more +11 moreAn elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector...7.8 High
- microsoft rome sdk, project rome +1 moreAn information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS...5.9 Medium
- microsoft internet explorer, internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems +3 more +5 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edge, internet explorer 10, internet explorer 11 +26 more +28 moreA security feature bypass vulnerability exists when Microsoft Browsers fail to validate the...4.3 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn information disclosure vulnerability exists when the Windows Transaction Manager improperly...5.5 Medium
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 version 1803 for 32-bit systems +9 more +11 moreOut-of-bounds write7.5 High
- microsoft windows, windows server, windows 10 +6 more +8 moreAn information disclosure vulnerability exists when DirectX improperly handles objects in memory,...5.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreAn elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreAn elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS)...7.8 High
- microsoft lync, lync server +1 moreAn information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information...6.5 Medium
- microsoft internet explorer 10, internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems +5 more +7 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft .net framework, .net framework 3.5, .net framework 3.5 and 4.7.2 on windows 10 version 1809 for 32-bit systems +30 more +32 moreAn elevation of privilege vulnerability exists when the .NET Framework common language runtime ...5.5 Medium
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 version 1607 for 32-bit systems +17 more +19 moreOut-of-bounds write7.5 High
- microsoft windows, windows server, windows 10 +1 more +3 moreA denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to...6.2 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +4 more +6 moreA remote code execution vulnerability exists in the Windows Remote Desktop Client when a user...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +5 more +7 moreA remote code execution vulnerability exists in the Windows Remote Desktop Client when a user...8.8 High
- deltaww dcisoftDelta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData...7.8 High
- netgear n300 wnr2000v5, wnr2000 firmware +1 moreAn exploitable denial-of-service vulnerability exists in the Host Access Point Daemon (hostapd)...7.5 High
- netgear n300 wnr2000v5, wnr2000 firmware +1 moreAn exploitable denial-of-service vulnerability exists in the session handling functionality of...7.5 High
- delta electronics tpeditorDelta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow...7.8 High
- delta electronics tpeditorDelta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow...7.8 High
- delta electronics tpeditorDelta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities...7.8 High
- apache ofbizAn RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field...9.8 Critical
- xwiki cryptpadThe pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has...6.5 Medium
- apache ofbizThe "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in...6.1 Medium
- apache ofbizThe java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is...9.8 Critical
- apache ofbizThe Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests...9.8 Critical
- teamviewerAn issue was discovered in TeamViewer 14.2.2558. Updating the product as a non-administrative...7.8 High
- dell rsa identity governance and lifecycle, rsa via lifecycle and governance +1 moreThe RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products...8.8 High
- dell rsa identity governance and lifecycle, rsa via lifecycle and governance +1 moreThe RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products...5.4 Medium
- dell rsa identity governance and lifecycle, rsa via lifecycle and governance +1 moreThe RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products...6.4 Medium
- dell rsa identity governance and lifecycle, rsa via lifecycle and governance +1 moreThe RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products...6.4 Medium
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of a carbons message in module/xep...7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of an MAM message in module/xep...7.5 High
- easyappointments easy\!appointmentsEasy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure (Username...5.3 Medium
- trend micro deep security, vulnerability protection, trend micro, inc. micro deep security +1 more +3 moreTrend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable...4.9 Medium
- eclipse paho java client, the eclipse foundation eclipse paho +1 moreImproper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library7.5 High
- msi afterburnerThe driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows...7.8 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moredrivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the...4.1 Medium
- linux kerneldrivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the...4.7 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moredrivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return...4.1 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moredrivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the...4.1 Medium
- Show moreLoading…