CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- rubyzip project rubyzip, fedoraproject fedora, redhat cloudforms +2 moreRubyzip denial of service5.5 Medium
- docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 moreIncorrect Authorization in runc7.5 High
- debian linux, lemonldap-ng lemonldap\ +1 moreOpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access...9.8 Critical
- tridium niagara, niagara ax, niagara4 +2 moreA specific utility may allow an attacker to gain read access to privileged files in the Niagara...4.4 Medium
- rockwellautomation arenaIn Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a...7.8 High
- vbulletinvBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter...9.8 Critical
- upredsun file sharing wizardFile Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by...9.8 Critical
- bluestacksAn issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows....6.5 Medium
- joomla joomla\!Joomla! XSS in Default Templates6.1 Medium
- netapp ontap select deploy administration utilityONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in...9.8 Critical
- netapp ontap select deploy administration utilityONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound...9.8 Critical
- suricata-ids suricataAn issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the...9.1 Critical
- suricata-ids suricataAn issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid...9.8 Critical
- suricata-ids suricataAn issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 ...9.1 Critical
- nxp kinetis k8x firmware, kinetis kv1x firmware, kinetis kv3x firmware +2 moreOn NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a...6.6 Medium
- st stm32f4 firmware, stm32f7 firmware, stm32h7 firmware +3 more +5 moreOn STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software...6.6 Medium
- riot-os riotRIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute),...7.5 High
- devise token auth project token authDevise Token Auth vulnerable to Cross-site Scripting6.1 Medium
- sick fx0-gent00000 firmware, fx0-gpnt00000 firmware +1 moreSICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow7.5 High
- dell client platforms: dell update packages (dup) framework file, update package framework, dell emc servers: all other drivers, bios and firmware: dell update package (dup) framework file +1 more +3 moreAn Uncontrolled Search Path Vulnerability is applicable to the following: Dell Update Package ...6.7 Medium
- ipswitch moveit transferMOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and...9.4 Critical
- totaldefense anti-virusIn Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%...7.8 High
- totaldefense anti-virusIn Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%...7.8 High
- totaldefense anti-virusIn Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\...7.8 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 3.0 and 3.0.1 stores user credentials in plain in clear text...6.2 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 3.0 and 3.0.1 is vulnerable to cross-site request forgery...4.3 Medium
- redhat tectonicCoreOS Tectonic 1.7.x and 1.8.x before 1.8.7-tectonic.2 deploys the Grafana web application using...6.1 Medium
- wolfsslIn wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1...9.8 Critical
libxml2SUSE,libxml2-pythonSUSE +1 moreSecurity update for libxml2No scoreshadowopenSUSE,util-linuxopenSUSE +1 moreSecurity update for util-linux and shadowNo score- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreAn issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not...9.8 Critical
- pam-python project pam-python, canonical ubuntu linux, debian linux +2 morepam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of...7.8 High
- cure53 dompurify, debian linux +1 moreCross-Site Scripting in dompurify6.1 Medium
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +6 more +8 moreAn exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...7.5 High
- pac4jUse of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml4.9 Medium
- apereo central authentication serviceUse of Insufficiently Random Values in Apereo CAS8.1 High
- microsoft internet explorer, internet explorer 10, internet explorer 11 +5 more +7 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft forefront endpoint protection 2010, forefront endpoint protection, security essentials +42 more +44 moreA denial of service vulnerability exists when Microsoft Defender improperly handles files, aka ...7.5 High
generator-jhipsternpmHigh severity vulnerability that affects generator-jhipster8.1 High- cloud foundry cf deployment, cf nfs volume release, cloudfoundry cf-deployment +1 more +3 moreVolume Services is vulnerable to an LDAP injection attack8.4 High
- grafanaAn issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana (e.g., MySQL...4.9 Medium
- redlion crimsonRed Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow...7.8 High
- redlion crimsonRed Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow...7.8 High
- redlion crimsonRed Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow...7.8 High
- redlion crimsonRed Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a...6.5 Medium
- apache jspwikiCross-site Scripting in Apache JSPWiki6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWiki6.1 Medium
- home-assistantHome Assistant information disclosure vulnerability7.5 High
- makandra consulConsul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly9.8 Critical
- sahipro sahi proWithin Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files...7.5 High
- Show moreLoading…