CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreA buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's...7.2 High
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote...4.7 Medium
- logmein lastpassLogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the...8.2 High
- gradleUse of a weak cryptographic algorithm in Gradle5.9 Medium
- apache tapestryTiming attack on HMAC signature comparison in Apache Tapestry9.8 Critical
- gitlab omnibusAn issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain...6.5 Medium
- open-emr openemrOpenEMR v5.0.1-6 allows XSS.6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1. Under very...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. The...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. The...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1....7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1....5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11.10.x before 11...5.3 Medium
- open-emr openemrOpenEMR v5.0.1-6 allows code execution.7.2 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1....7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An...5.4 Medium
- braftonThe Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page...6.1 Medium
- tagdiv newspaperThe newspaper theme before 6.7.2 for WordPress has a lack of options access control via...9.8 Critical
- apache tapestryPath traversal attack on Windows platforms7.5 High
- intenogroup eg200 firmwareInteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that...6.5 Medium
- moddable, moddable xs +1 moreIn XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in...9.8 Critical
- intel 3106 firmware, 4109t firmware, 4110 firmware +239 more +241 moreA race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may...4.8 Medium
- intel easy streaming wizardImproper file permissions in the installer for Intel(R) Easy Streaming Wizard before version 2.1...6.7 Medium
- redmineup crmThe CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.6.1 Medium
- apache tapestryDeserialization of Untrusted Data in Apache Tapestry9.8 Critical
- beegoIncorrect Default Permissions in Beego5.5 Medium
- beegoBeego has a file creation race condition4.7 Medium
- geautomation proficyEmerson GE Automation Proficy Machine Edition 8.0 allows an access violation and application...7.5 High
- gpac, debian linux +1 moreAVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a...6.5 Medium
- gpac, debian linux +1 moreaudio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to...6.5 Medium
- gpacGPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.6.5 Medium
- miniupnp project ngiflibngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from...8.8 High
- miniupnp project ngiflibngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from...8.8 High
- libwav project libwavmarc-q libwav through 2019-08-15 has a NULL pointer dereference in gain_file() at wav_gain.c.6.5 Medium
- axiosys bento4Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream...5.5 Medium
- rockcarry ffjpegffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.6.5 Medium
- rockcarry ffjpegffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.6.5 Medium
- rockcarry ffjpegffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.6.5 Medium
- membersonicThe MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because...9.8 Critical
- supportflow project supportflowThe supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.6.1 Medium
- Show moreLoading…