CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- bosch access, access professional edition +1 moreAn unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting...8.8 High
- bosch access, access professional edition +1 moreUnauthorized APE administration privileges can be achieved by reverse engineering one of the APE...9.9 Critical
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use...9.8 Critical
- adobe application managerAdobe application manager installer version 10.0 have an Insecure Library Loading (DLL hijacking)...7.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same...9.8 Critical
- nxp kinetis k8x firmware, kinetis kv1x firmware, kinetis kv3x firmware +2 moreOn NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a...9.8 Critical
- st stm32f4 firmware, stm32f7 firmware, stm32h7 firmware +3 more +5 moreOn STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices,...9.8 Critical
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to...7.4 High
- eclipse omr, the eclipse foundation eclipse omr +1 morePrior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection...7.8 High
- shirasagi project shirasagiOpen redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect...6.1 Medium
- apng-drawable 1.0.0 to 1.6.0, linecorp apng-drawable +1 moreInteger overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a...8.8 High
- kddi smart tv box firmware, smart tv box firmware version prior to 1300 +1 moreSmart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction...9.8 Critical
- fujixerox apeosware management suite, apeosware management suite 2, fuji xerox co.,ltd. apeosware management suite and apeosware management suite 2 +2 moreOpen redirect vulnerability in ApeosWare Management Suite Ver.1.4.0.18 and earlier, and ApeosWare...6.1 Medium
- ec-cube amazon pay, ltd." ec-cube plugin 'amazon pay plugin 2.12,2.13' +1 moreCross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2...6.1 Medium
- panasonic video insight vms, video insight vms 7.3.2.5 and earlier +1 moreSQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote...8.8 High
- category specific rss feed subscription version v2.0 and earlier, tipsandtricks-hq category specific rss feed subscription +1 moreCross-site request forgery (CSRF) vulnerability in Category Specific RSS feed Subscription...8.8 High
- ultra-prod wordpress ultra simple paypal shopping cart, wordpress ultra simple paypal shopping cart v4.4 and earlier +1 moreCross-site request forgery (CSRF) vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4...8.8 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreSQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated...7.6 High
- hikari denwa router/home gateway provided by nippon telegraph and telephone east corporation denwa router/home gateway, ntt-east rs-500ki firmware, rs-500mi firmware +22 more +24 moreCross-site request forgery (CSRF) vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa...8.8 High
- hikari denwa router/home gateway provided by nippon telegraph and telephone east corporation denwa router/home gateway, ntt-east rs-500ki firmware, rs-500mi firmware +22 more +24 moreCross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOpen redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreMail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of...4.9 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreDOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote...5.4 Medium
- wondercms 2.6.0 and earlier, wondercms +1 moreDirectory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to...6.5 Medium
- afterlogic auroraAfterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by...6.1 Medium
- mcafee web gateway, web gateway(mwg) +1 moreWeb Gateway (MWG) - Reflected Cross Site Scripting vulnerability8.1 High
- tripplite pdumh15at firmwareTripp Lite PDUMH15AT 12.04.0053 devices allow unauthenticated POST requests to the /Forms/...9.1 Critical
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security Plugin4.2 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security Plugin4.2 Medium
- jenkins beaker builder, jenkins project beaker builder plugin +1 moreJenkins Beaker Builder Plugin has Insufficiently Protected Credentials5.5 Medium
- jenkins project aqua security serverless scanner plugin, jenkins aqua security severless scanner +1 moreJenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields3.1 Low
- jenkins dashboard view, jenkins project dashboard view plugin +1 moreJenkins Dashboard View Plugin vulnerable to Cross-site Scripting5.4 Medium
- jenkins build environment, jenkins project build environment plugin +1 moreJenkins Build Environment Plugin vulnerable to Cross-site Scripting5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security Plugin4.2 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Script Security Plugin4.2 Medium
- jenkins git client, jenkins project git client plugin +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin8.8 High
- simalliance toolbox browser, trustedconnectivityalliance s\@t browser +1 moreSome Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which...9.8 Critical
- motorola firmwareSome Motorola devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC,...9.8 Critical
sailsjs-cachemannpmUndefined Behavior in sailsjs-cachemanNo scorealgo-httpservnpmPath Traversal in algo-httpserv8.6 High- oceanwp ocean extraincludes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows...7.5 High
- telegramThe "delete for" feature in Telegram before 5.11 on Android does not delete shared media files...5.5 Medium
- opencvOut-of-bounds Read in OpenCV5.3 Medium
- microsoft azure devops server, team foundation server, azure devops server 2019 update 1 +1 more +3 moreA remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation...9.8 Critical
- microsoft team foundation server, azure devops server, team foundation server 2015 +1 more +3 moreA Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly...5.4 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly...7.8 High
- microsoft asp.net coreElevation of privilege in ASP.NET Core8.8 High
- microsoft .net core, powershell core +1 moreHigh severity vulnerability that affects System.Management.Automation7.5 High
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 for 32-bit systems +19 more +21 moreOut-of-bounds write7.5 High
- Show moreLoading…