CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- apache jspwikiCross-site scripting in Apache JSPWiki6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWiki6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWiki6.1 Medium
- cactiIn Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph)...4.3 Medium
- vandyvape swell kit mod firmwareAn issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker...4.3 Medium
- zte zxv10 b860a, zxv10 b860a firmware +1 moreAll versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation...8.1 High
- wtcms project wtcmsWTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with resultant XSS.6.5 Medium
- 5none nonecmsNoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the...6.5 Medium
- zzzcms zzzphpZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because...9.8 Critical
- zzzcms zzzphpZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php...7.5 High
ibusUbuntuibus regressionNo score- radare radare2In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core...7.8 High
- hunspell project hunspell, fedoraproject fedora +1 moreHunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.6.5 Medium
- imagemagick, canonical ubuntu linux, opensuse backports +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.6.5 Medium
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in...6.5 Medium
- kkcms project kkcmskkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.8.8 High
- libmingMing (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the...9.1 Critical
- phpmywindadmin/infoclass_update.php in PHPMyWind 5.6 has stored XSS.4.8 Medium
- phpmywindadmin/infolist_add.php in PHPMyWind 5.6 has stored XSS.6.1 Medium
- integard pro project proIntegard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow...9.8 Critical
- phpipamphpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table...9.8 Critical
- phpipamphpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when...9.8 Critical
- phpipamphpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter...9.8 Critical
- phpipamphpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when...9.8 Critical
- phpipamphpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when...9.8 Critical
- joinmastodon mastodonMastodon before 2.6.3 mishandles timeouts of incompletely established sessions.9.8 Critical
- travelokaThe Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common...4.7 Medium
- gilacms gila cmsGila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.4.9 Medium
- idreamsoft icmsAn issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.6.5 Medium
- yzmcmsadmin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a...6.5 Medium
- pagekitPagekit User enumeration5.3 Medium
- thinksaasAn issue was discovered in ThinkSAAS 2.91. There is XSS via the index.php?app=group&ac=create&ts...4.8 Medium
- thinksaasAn issue was discovered in ThinkSAAS 2.91. There is XSS via the content to the index.php?app...6.1 Medium
- joyplus project joyplusjoyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.7.5 High
- joyplus project joyplusjoyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing...9.8 Critical
- tuzicmsTuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article...6.1 Medium
- tuzicmsTuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.8.8 High
- tuzicmsTuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.8.8 High
- joyplus project joyplusjoyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF.8.8 High
- digimute ogma cmsOgma CMS 0.5 has XSS via creation of a new blog.5.4 Medium
- linux kernel, canonical ubuntu linux, f5 traffix signaling delivery controller +2 moreIn the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to...7.5 High
- google chromeInsufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75...4.3 Medium
- google chromeOut of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a...9.8 Critical
- supermicro a1sa2-2750f firmware, a1sai-2550f firmware, a1sai-2750f firmware +333 more +335 moreOn Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and...10.0 Critical
- supermicro a1sa2-2750f firmware, a1sai-2550f firmware, a1sai-2750f firmware +260 more +262 moreOn Supermicro X10 and X11 products, a client's access privileges may be transferred to a...10.0 Critical
- gnome file-roller, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path...4.3 Medium
- Show moreLoading…