CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- terrasoft bpm online crm system sdkA SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const() in Terrasoft Bpm...9.8 Critical
- advantech webaccessIn WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an...9.8 Critical
- aspose aspose.pdf for c\+\+, talos aspose.pdf for c++ +1 moreAn exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are...8.8 High
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...7.7 High
- vmware vcenter serverVMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j)...7.7 High
- talos aspose, aspose aspose.pdf for c\+\+ +1 moreAn uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles...9.8 Critical
- talos aspose, aspose aspose.pdf for c\+\+ +1 moreAn exploitable use-after-free vulnerability exists in the way LZW-compressed streams are...9.8 Critical
- dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 moreThe specific fields of CGI interface of some Dahua products are not strictly verified, an...9.8 Critical
- dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 moreSome Dahua products have the problem of denial of service during the login process. An attacker...7.5 High
- dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 moreSome Dahua products have information leakage issues. Attackers can obtain the IP address and...5.3 Medium
- dahua ipc-hdw1x2x,ipc-hfw1x2x,ipc-hdw2x2x,ipc-hfw2x2x,ipc-hdw4x2x,ipc-hfw4x2x,ipc-hdbw4x2x,ipc-hdw5x2x,ipc-hfw5x2x, dahuasecurity ipc-hdbw4x2x firmware, ipc-hdw1x2x firmware +7 more +9 moreSome of Dahua's Debug functions do not have permission separation. Low-privileged users can use...8.8 High
- vivotek cameraVIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP...7.5 High
- cisco hyperflex hx-series, hyperflex hx220c af m5 firmware, hyperflex hx220c edge m5 firmware +3 more +5 moreCisco HyperFlex Software Counter Value Injection Vulnerability5.3 Medium
- cisco hyperflex hx-series, hyperflex hx220c af m5 firmware, hyperflex hx220c edge m5 firmware +3 more +5 moreCisco HyperFlex Software Cross-Frame Scripting Vulnerability6.5 Medium
- publisureAn issue was discovered in the secure portal in Publisure 2.1.2. Because SQL queries are not well...9.8 Critical
- publisureAn issue was discovered in servletcontroller in the secure portal in Publisure 2.1.2. One can...6.5 Medium
- publisureAn issue was discovered in the secure portal in Publisure 2.1.2. Once successfully authenticated...7.2 High
drupal/tablefieldPackagistThis module allows you to attach tabular data to an entity. There is insufficient access checking for users with the ability to "Export Tablefield Data as CSV". They can export data from unpublished n…No score- ibm financial transaction manager, financial transaction manager for multiplatform +1 moreIBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0...5.0 Medium
drupal/create_user_permissionPackagistThis module enables you to have a separate permission only for creating users. The module doesn't respect Drupal's setting for "Who can register accounts?" when set to "Visitors, but administrator app…No score- mi xiaomi millet firmwareA malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A...7.4 High
- westerndigital wd my book firmwareWestern Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which...9.8 Critical
- webkul bagistoAuthorization Bypass Through User-Controlled Key in Bagisto8.8 High
- zulip serverZulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is...5.4 Medium
- truemag theme project themeThe Truemag theme 2016 Q2 for WordPress has XSS via the s parameter.6.1 Medium
- zulip serverThe Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to...6.5 Medium
- templatic telvolutionThe Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php...9.8 Critical
- gnucobol project gnucobolGnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via...7.8 High
- gnucobol project gnucobolGnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y...7.8 High
- eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 moreeQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by...9.8 Critical
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published...6.5 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages.6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a...6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password...5.3 Medium
- schneider electric modicon m340, schneider electric se modicon m580, modicon premium +5 more +7 moreA CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90)...7.5 High
- schneider electric somachine hvacA CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier...7.8 High
- cve-2019-6813 bmxnor0200h ethernet / serial rtu module, modicon m340 controller, schneider-electric bmxnor0200h firmware +1 more +3 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in...7.5 High
- schneider electric se modicon quantum 140 noe771x1, schneider-electric modicon quantum 140noe77101 firmware, modicon quantum 140noe77111 firmware +2 moreAn Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon...7.5 High
- schneider electric se bmxnor0200h ethernet / serial rtu module, schneider-electric bmxnor0200h firmware +1 moreCWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module...8.8 High
- schneider electric modicon m340, schneider electric se modicon m580, modicon premium +5 more +7 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2...7.5 High
- schneider electric se apc ups network management card 2 aos, schneider-electric ap9630 firmware, ap9631 firmware +2 more +4 moreA Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2...9.8 Critical
- schneider electric modicon m340, schneider electric se modicon m580, schneider-electric modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2...7.5 High
- schneider electric se magelis hmi panels, schneider-electric hmigto firmware, hmigtu firmware +7 more +9 moreA CWE-754 ? Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis...6.5 Medium
- schneider electric se spacelynk, wiser for knx, schneider-electric spacelynk firmware +1 more +3 moreA CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser...8.3 High
- schneider electric se bmxnor0200h ethernet / serial rtu module, schneider-electric bmxnor0200h firmware +1 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in...8.6 High
- schneider electric se modicon m580, schneider-electric modicon m580 firmware +1 moreA CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80,...5.9 Medium
- schneider electric se u.motion server, schneider-electric meg6260-0410 firmware, meg6260-0415 firmware +2 more +4 moreA Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX...9.8 Critical
- schneider-electric meg6260-0410 firmware, meg6260-0415 firmware, meg6501-0001 firmware +1 more +3 moreAn Improper Access Control: CWE-284 vulnerability exists in U.motion Server (MEG6501-0001 - U...8.8 High
- schneider-electric meg6260-0410 firmware, meg6260-0415 firmware, meg6501-0001 firmware +1 more +3 moreAn Improper Access Control: CWE-284 vulnerability exists in U.motion Server (MEG6501-0001 - U...6.5 Medium
- cve-2019-6837 u.motion server, schneider-electric meg6260-0410 firmware, meg6260-0415 firmware +2 more +4 moreA Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501...9.1 Critical
- Show moreLoading…