CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- infosysta in-app \& desktop notifications An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira.... 5.3 Medium
- infosysta in-app \& desktop notifications An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira.... 7.5 High
- phoenixcontact pc worx, pc worx express, config\+ +2 more An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86,... 7.8 High
- honeywell h2w2gr1 firmware, h2w2pc1m firmware, h2w2per3 firmware +61 more +63 more Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in... 9.8 Critical
- honeywell h2w2gr1 firmware, h3w2gr1 firmware, h3w2gr1v firmware +45 more +47 more Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists... 7.5 High
- honeywell h2w2gr1 firmware, h2w2pc1m firmware, h2w2per3 firmware +22 more +24 more Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the... 7.5 High
- advantech wise-paas\/rmm Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input... 6.5 Medium
- advantech wise-paas\/rmm Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow... 7.5 High
- control-webpanel webpanel Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists... 4.6 Medium
- advantech wise-paas\/rmm Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows... 9.8 Critical
- icedtea icedtea6 IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended... 9.1 Critical
- icedtea icedtea6 IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read... 9.1 Critical
- advantech wise-paas\/rmm Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by... 9.8 Critical
- call-cc chicken Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table... 9.8 Critical
- call-cc chicken A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to... 5.3 Medium
- call-cc chicken, debian linux +1 more Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an... 6.5 Medium
- call-cc chicken Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a... 7.5 High
- call-cc chicken Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select... 8.8 High
- cujo smart firewall firmware An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart... 5.3 Medium
- atlantiswordprocessor atlantis word processor An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the... 8.8 High
- getcujo smart firewall An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall,... 9.0 Critical
- sierrawireless airlink es450 firmware An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi... 7.1 High
- opensrcsec grsecurity, pax +1 more An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in... 5.9 Medium
- antennahouse rainbow pdf office server document converter, antenna house house +1 more A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow... 8.8 High
- google nest cam iq indoor firmware An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ... 5.3 Medium
- call-cc chicken, debian linux +1 more OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken... 8.8 High
- amd radeon 550 firmware, radeon rx 550 firmware, radeon rx 550x firmware +2 more An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20... 10.0 Critical
- tempo An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin,... 4.3 Medium
- autojump, debian linux +1 more autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install... 7.3 High
- youphptube An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted... 10.0 Critical
- ikimedia foundation mediawiki, debian linux +1 more A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4... 6.1 Medium
- youphptube An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin... 8.9 High
- fortinet fortiextender, fortiguard fortiextender firmware +1 more An OS command injection vulnerability in FortiExtender 4.1.1 and below under CLI admin console... 7.2 High
- ruby-lang ruby193 ruby193 uses an insecure LD_LIBRARY_PATH setting. 3.3 Low
- technicolor td5130v2 firmware An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor... 7.2 High
- mantisbt A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report... 5.4 Medium
- mantisbt, fedoraproject fedora +1 more A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject... 6.1 Medium
- mantisbt, fedoraproject fedora +1 more MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close... 4.3 Medium
- clickhouse ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. 5.3 Medium
- baseurl yum, debian linux +1 more yum does not properly handle bad metadata, which allows an attacker to cause a denial of service... 9.8 Critical
- coinkite coldcard mk1 firmware, coldcard mk2 firmware +1 more ** DISPUTED ** On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was... 5.3 Medium
- pimcore Pimcore XSS Vulnerability 6.1 Medium
- ipswitch moveit transfer In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1... 9.8 Critical
- ipswitch moveit transfer In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow... 9.8 Critical
- yithemes yith advanced refund system for woocommerce, yith color and label variations for woocommerce, yith custom thank you page for woocommerce +35 more +37 more plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress... 4.3 Medium
- bitdefender box firmware An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an... 7.8 High
- python-docutils project python-docutils, debian linux +1 more python-docutils allows insecure usage of temporary files 9.1 Critical
- debian overkill overkill has buffer overflow via long player names that can corrupt data on the server machine 9.8 Critical
- burn project burn, debian linux +1 more burn allows file names to escape via mishandled quotation marks 9.8 Critical
- zte corporation zx297520v3, ztw zx297520v3 firmware +1 more The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted... 8.0 High
- Show olderLoading…