CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- schneider-electric meg6260-0410 firmware, meg6260-0415 firmware, meg6501-0001 firmware +1 more +3 moreAn Improper Access Control: CWE-284 vulnerability exists in U.motion Server (MEG6501-0001 - U...7.5 High
- schneider electric se u.motion server, schneider-electric meg6260-0410 firmware, meg6260-0415 firmware +2 more +4 moreA Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U...5.4 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit...5.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9,0 could allow a remote attacker to traverse...4.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client...3.5 Low
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site...5.4 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse...5.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow...5.9 Medium
- ibm cognos controllerIBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 uses weaker than expected cryptographic...5.9 Medium
- ibm cognos controllerIBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 does not set the secure attribute on...3.7 Low
- ibm application performance management, cloud application performance management +1 moreIBM Cloud Application Performance Management 8.1.4 could allow a remote attacker to hijack the...6.1 Medium
- codesys3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.15.0,...8.6 High
- micro focus service managerData exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35,...7.5 High
- gmbh 3s-smart software solutions gmbh codesys v3 opc ua server, codesys control for beaglebone, control for empc-a\/imx6 +8 more +10 more3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0,...6.5 Medium
- micro focus service managerInsecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30,...8.8 High
- micro focus service managerUnauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9...7.5 High
- dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 moreOnline upgrade information in some firmware packages of Dahua products is not encrypted....5.3 Medium
- asus asuswrt-merlinAn issue was discovered in Asuswrt-Merlin 384.6. There is a stack-based buffer overflow issue in...7.5 High
- norton password manager, symantec norton password manager +1 moreNorton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure...5.5 Medium
- codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +11 more +13 moreAn issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the...7.5 High
- freeipa, red hat ipa, redhat enterprise linux +2 moreA flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache...5.6 Medium
- hrworksA reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers...6.1 Medium
- scoreme project scoremeThe ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter.5.4 Medium
- codepeople music storeThe music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An...7.5 High
- imdb-widget project imdb-widgetThe imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion.7.5 High
- wpcerber cerber security antispam \& malware scanThe wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.6.1 Medium
- leenk leenk.meThe leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF.8.8 High
- leenk leenk.meThe leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message,...6.1 Medium
- woocommerce persian woocommerce smsThe persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS.6.1 Medium
- nerdcow tweet wheelThe tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret,...6.1 Medium
- smackcoders echo signThe echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id...6.1 Medium
- smackcoders echo signThe echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.6.1 Medium
- ghostThe ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php...6.5 Medium
- kentothemes kento-post-view-counterThe kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page...8.8 High
- kentothemes kento-post-view-counterThe kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via...6.1 Medium
- kentothemes kento-post-view-counterThe kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo.6.1 Medium
- fossura tag minerThe fossura-tag-miner plugin before 1.1.5 for WordPress has XSS.6.1 Medium
- fossura tag minerThe fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF.8.8 High
- neliosoftware nelio ab testingThe nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.6.5 Medium
- kodebyraaet safe editorThe safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.6.1 Medium
- tonjoostudio fluid-responsive-slideshowThe fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin...6.1 Medium
- tonjoostudio fluid-responsive-slideshowThe fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant...8.8 High
shadowSUSE,util-linuxSUSE,util-linux-systemdSUSE +2 moreSecurity update for util-linux and shadowNo score- codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +7 more +9 moreAn issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can...8.8 High
apache2Ubuntuapache2 regressionNo score- code42In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been...9.8 Critical
- infradead openconnect, canonical ubuntu linux, debian linux +2 more +4 moreprocess_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server...9.8 Critical
- trusteddomain opendmarc, canonical ubuntu linux, debian linux +1 more +3 moreOpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass...9.8 Critical
- Show moreLoading…