CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- gigastone smart battery a4, smart battery a4 firmware +1 moreAn unsafe authentication interface was discovered in Smart Battery A49.8 Critical
- gigastone smart battery a4, smart battery a4 firmware +1 moreA broken access control vulnerability discovered in Smart Battery A49.8 Critical
- gigastone smart battery a2-25de, smart battery a2-25de firmware +1 moreAn authentication bypass vulnerability discovered in Smart Battery A2-25DE9.8 Critical
- f5 big-iq, big-iq centralized management +1 moreThere is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6...5.4 Medium
- f5 big-iq, big-iq centralized management +1 moreIn BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any...6.5 Medium
- irfanviewIn IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at...7.8 High
- f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 moreIn BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6...5.3 Medium
- alo-easymail project alo-easymailThe alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo...6.5 Medium
- hcltech appscan sourceHCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple...7.1 High
- netgate pfsensepfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document...8.8 High
- centreonSQL injection in Centreon9.8 Critical
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreJenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text5.5 Medium
- jenkins gitlab logo, jenkins project gitlab logo plugin +1 moreJenkins GitLab Logo Plugin stores credentials unencrypted5.5 Medium
- jenkins aqua security scanner, jenkins project aqua security scanner plugin +1 moreJenkins Aqua Security Scanner Plugin showed plain text password in configuration form7.5 High
- jenkins aqua microscanner, jenkins project aqua microscanner plugin +1 moreJenkins Aqua MicroScanner Plugin showed plain text credential in configuration form5.3 Medium
- jenkins gem publisher, jenkins project gem publisher plugin +1 moreJenkins Gem Publisher Plugin stores credentials as plaintext5.5 Medium
- jenkins google calendar, jenkins project google calendar plugin +1 moreJenkins Google Calendar Plugin has Insufficiently Protected Credentials6.5 Medium
- jenkins eloyente, jenkins project eloyente plugin +1 moreJenkins elOyente Plugin has Insufficiently Protected Credentials5.5 Medium
- jenkins codescan, jenkins project codescan plugin +1 moreJenkins CodeScan Plugin has Insufficiently Protected Credentials5.5 Medium
- jenkins call remote job, jenkins project call remote job plugin +1 moreJenkins Call Remote Job Plugin has Insufficiently Protected Credentials6.5 Medium
- jenkins project azure event grid build notifier plugin, jenkins azure event grid notifier +1 moreJenkins Azure Event Grid Build Notifier Plugin has Insufficiently Protected Credentials4.3 Medium
- jenkins assembla, jenkins project assembla plugin +1 moreJenkins Assembla Plugin has Insufficiently Protected Credentials5.5 Medium
- jenkins vfabric application director, jenkins project vfabric application director plugin +1 moreJenkins vFabric Application Director Plugin Insufficiently Protected Credentials5.5 Medium
- jenkins project kubernetes :: pipeline :: arquillian steps plugin, jenkins kubernetes pipeline +1 moreIncorrect Authorization in Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin9.9 Critical
- jenkins project kubernetes :: pipeline :: kubernetes steps plugin, jenkins kubernetes pipeline +1 moreIncorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin9.9 Critical
- jenkins violation comments to gitlab, jenkins project violation comments to gitlab plugin +1 moreViolation Comments to GitLab Plugin has Insufficiently Protected Credentials6.5 Medium
- jenkins violation comments to gitlab, jenkins project violation comments to gitlab plugin +1 moreJenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials6.5 Medium
- jenkins git changelog, jenkins project git changelog plugin +1 moreJenkins Git Changelog Plugin has Insufficiently Protected Credentials6.5 Medium
- jenkins project data theorem: ci/cd plugin, jenkins data theorem mobile app security +1 moreJenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials6.5 Medium
- jenkins inedo proget, jenkins project inedo proget plugin +1 moreJenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive Information7.5 High
- jenkins inedo buildmaster, jenkins project inedo buildmaster plugin +1 moreJenkins Inedo BuildMaster Plugin showed plain text password in configuration form7.5 High
- jenkins log parser, jenkins project log parser plugin +1 moreJenkins Log Parser Plugin vulnerable to Cross-site Scripting5.4 Medium
- jenkins project inheritance, jenkins project inheritance plugin +1 moreMissing permission check in Jenkins Project Inheritance Plugin4.3 Medium
- jenkins project inheritance, jenkins project inheritance plugin +1 moreJenkins Project Inheritance Plugin vulnerable to Cross-Site Request Forgery4.3 Medium
- jenkins project inheritance, jenkins project inheritance plugin +1 moreProject Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin6.5 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins4.8 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
drupal/gutenbergPackagistThis module provides a new UI experience for node editing - Gutenberg editor. The routes used by the Gutenberg editor lack proper permissions allowing untrusted users to view and modify some content t…No scoredrupal/permissions_by_termPackagistThis module enables you to control access to content based on taxonomy terms. The module doesn't sufficiently check if a given entity should be access controlled, defaulting to allowing access even to…No score- emlogemlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action...9.8 Critical
- hongcms project hongcmsHongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php...6.5 Medium
- google chromeUse after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to...8.8 High
- google chromeUse after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to...8.8 High
- google chromeUse after free in offline mode in Google Chrome prior to 77.0.3865.90 allowed a remote attacker...8.8 High
- google chromeUse after free in sharing view in Google Chrome prior to 77.0.3865.90 allowed a remote attacker...8.8 High
linksopenSUSESecurity update for linksNo score- Show moreLoading…