CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- slidervilla testimonial sliderThe testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.6.5 Medium
- onthegosystems sitepress-multilingual-cmsThe sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept...6.1 Medium
- angrycreative bj lazy loadThe bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.7.5 High
- wpsymposiumpro wp-symposiumThe wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp...6.1 Medium
- eshop project eshopThe eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin...6.5 Medium
- royal-slider project royal-sliderThe Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter.6.1 Medium
- gopostmatic replyableThe Postmatic plugin before 1.4.6 for WordPress has XSS.6.1 Medium
- blubrry powerpressThe Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.5.4 Medium
- novnc, canonical ubuntu linux, debian linux +1 more +3 moreCross-Site Scripting in @novnc/novnc6.1 Medium
- samsung text-to-speechThe Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Android...7.8 High
- haloHalo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.5.4 Medium
- cisco nx-os, nx-os software 5.0(3)a1(1) +1 moreCisco NX-OS Software Virtualization Manager Command Injection Vulnerability6.7 Medium
- cisco ios, ios xe software 3.11.1s +1 moreCisco IOS XE Software Arbitrary Code Execution Vulnerability6.2 Medium
- cisco ios, ios xe software 3.2.11asg +1 moreCisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability6.7 Medium
- cisco ios, ios xe, ios xe software 3.6.0e +2 moreCisco IOS and IOS XE Software Stored Banner Cross-Site Scripting Vulnerability4.8 Medium
- cisco ios xe, ios xe software 16.4.1 +1 moreCisco IOS XE Software Path Traversal Vulnerability6.7 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software ISDN Data Leak Vulnerability4.7 Medium
- cisco ios xe, nx-os, nx-os software 6.0(2)a1(1) +50 more +52 moreCisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass Vulnerability6.7 Medium
- cisco ios xe, ios xe software 3.2.11asg +1 moreCisco IOS XE Software ASIC Register Write Vulnerability5.5 Medium
- cisco ios xe, ios xe software 16.1.1 +1 moreCisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability8.6 High
- cisco cgr 1000 firmware, industrial routers operating system software, ic3000 firmware +4 more +6 moreCisco IOx Application Environment Denial of Service Vulnerability7.5 High
- cisco ios xe, ios 15.0(1)xa2 +1 moreCisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability8.6 High
- cisco ios, ios 15.0(1)xo1 +1 moreCisco Catalyst 4000 Series Switches TCP Denial of Service Vulnerability8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability6.7 Medium
- cisco ios xe, ios xe software 3.2.9sg +1 moreCisco IOS XE Software Consent Token Bypass Vulnerability6.7 Medium
- cisco ios, ios xe software 3.2.9sg +1 moreCisco IOS and IOS XE Software Change of Authorization Denial of Service Vulnerability6.8 Medium
- cisco ios xe, ios xe software 16.4.1 +1 moreCisco IOS XE Software Stored Cross-Site Scripting Vulnerability5.5 Medium
- cisco ios, ios 12.2(15)b +1 moreCisco IOS and IOS XE Software HTTP Client Information Disclosure Vulnerability4.8 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability6.8 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Virtualization Manager CLI Command Injection Vulnerability6.7 Medium
- cisco ios xe, ios xe software 3.2.0ja +1 moreCisco IOS XE Software HTTP Server Denial of Service Vulnerability5.3 Medium
- cisco ios xe, ios xe software 3.16.0s +1 moreCisco IOS XE Software Unified Threat Defense Denial of Service Vulnerability8.6 High
- cisco ios, ios xe software 3.16.8s +1 moreCisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability8.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability8.6 High
- cisco ios, ios xe software 3.2.11asg, cloud services router 1000v firmware +1 more +3 moreCisco IOS XE Software Web UI Command Injection Vulnerabilities7.6 High
- cisco ios, ios xe +1 moreCisco IOS and IOS XE Software IP Ident Denial of Service Vulnerability8.6 High
- ibm content navigatorIBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- cisco ios, ios 15.7(3)m +1 moreCisco IOx for IOS Software Guest Operating System Unauthorized Access Vulnerability9.9 Critical
- cisco ios, ios xe, ios xe software 3.2.11asg +2 moreCisco IOS XE Software Digital Signature Verification Bypass Vulnerability6.7 Medium
- cisco ios, ios xe, ios xe software 3.2.11asg +2 moreCisco IOS XE Software Web UI Command Injection Vulnerabilities7.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability8.6 High
- ui ep-r6 firmware, ep-r8 firmware, er-12 firmware +9 more +11 moreUbiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk...7.5 High
- glpi-project glpiGLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php...8.8 High
- f5 big-ip apm edge client, big-ip access policy manager, big-ip access policy manager client +2 moreBIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +3 more +5 moreOn versions 13.0.0-13.1.0.1, 12.1.0-12.1.4.1, 11.6.1-11.6.4, and 11.5.1-11.5.9, BIG-IP platforms...5.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn versions 14.0.0-14.1.2, 13.0.0-13.1.3, 12.1.0-12.1.5, and 11.5.1-11.6.5, the BIG-IP system...4.3 Medium
- silverstripeSilverstripe Flash Clipboard Reflected XSS6.1 Medium
- silverstripeSession fixation in change password form6.3 Medium
- silverstripeLack of access control on upoaded files5.3 Medium
- silverstripeMissing warning can lead to unauthenticated admin access in SilverStripe9.8 Critical
- Show moreLoading…