CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is...5.4 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is...5.4 Medium
- ibm daeja viewone virtual, daeja viewone +1 moreIBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients...3.7 Low
- redhat codehaus, jboss enterprise application platform +1 moreDeserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl8.1 High
- pivotal apps manager, pivotal software application service +1 moreCSV Injection in usage report downloaded from Pivotal Application Manager3.5 Low
- jenkins sourcegear vault, jenkins project sourcegear vault plugin +1 moreJenkins SourceGear Vault plugin transmits credentials in plain text7.5 High
- jenkins ldap email, jenkins project ldap email plugin +1 moreJenkins LDAP Email Plugin shows plain text password in configuration form7.5 High
- jenkins dingding, jenkins project dingding[钉钉] plugin +1 moreDingTalk Plugin stores credentials in plain text3.3 Low
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin vulnerable to Cross-site Scripting5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreImproper Control of Generation of Code in Jenkins Script Security Plugin9.9 Critical
- jetbrains youtrackJetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles.6.1 Medium
- jetbrains intellij ideaJetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link...5.9 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel through 5.3.2...3.3 Low
- linux kernelieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux...3.3 Low
- linux kernelatalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel...3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 morebase_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel...3.3 Low
- linux kernelllcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through...3.3 Low
- govicture pc530 firmwareVicture PC530 devices allow unauthenticated TELNET access as root.9.8 Critical
- google chrome osThe Imagination Technologies driver for Chrome OS before R74-11895.B, R75 before R75-12105.B, and...7.8 High
- putty, netapp oncommand unified manager core package, opensuse leap +2 morePuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing...7.5 High