CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had several XSS vulnerabilities on the...6.1 Medium
- jetbrains youtrackJetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.8.8 High
- jetbrains youtrackIn JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.6.1 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +4 more +6 morePotential to access user credentials from the log files when debug logging enabled4.8 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability6.1 Medium
- cisco security managerCisco Security Manager Java Deserialization Vulnerability6.5 Medium
- jetbrains resharperJetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.7.3 High
- check point security gatewayIn a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point...7.5 High
drupal/simple_ampPackagistThis module allows display of a site's content in AMP format. The module doesn't sufficiently check access on unpublished or restricted content.No score- broadcom network flow analysisCA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a...9.8 Critical
- foxit, foxitsoftware reader, phantompdf +2 moreAn exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software...8.8 High
- butor portalButor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre...9.9 Critical
- enterprisedt completeftp serverEnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in...4.3 Medium
- compal ch7465lg firmwareCompal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because...9.8 Critical
- ibm security directory serverIBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The...5.3 Medium
- ibm security directory serverIBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm security directory serverIBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used...7.1 High
- ibm security directory serverIBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks,...7.4 High
- ibm security directory serverIBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a...7.5 High
- eclipse mojarra, oracle mojarra javaserver faces, application testing suite +20 more +22 moreCross-site Scripting in Eclipse Mojarra6.1 Medium
- linuxmint mintinstallmintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE...7.8 High
- salesagility suitecrmSuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation.9.8 Critical
- salesagility suitecrmSalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF.9.8 Critical
subversionDebiansubversion - updateNo score- linux kernelAn issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux...7.5 High
- abcprintf online store, online store system project store system +1 moreOnline Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has...5.3 Medium
- abcprintf online store, online store system project store system +1 moreOnline Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights...7.5 High
- abcprintf online store, online store system project store system +1 moreVulnerability in Online Store v1.0, The registration form requirements for the member email...6.1 Medium
- abcprintf online store, online store system project store system +1 moreVulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable5.4 Medium
- abcprintf online store, online store system project store system +1 moreVulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable...5.4 Medium
- apache minaApache MINA SSLFilter security Issue7.5 High
- jetbrains youtrackJetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of...6.1 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could...4.9 Medium
- emlogemlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin...6.5 Medium
- xunruicmsAn issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.5.4 Medium
- elastic code, kibana +1 moreA local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a...6.5 Medium
- puttyPuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows...9.8 Critical
- putty, opensuse leap +1 morePuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a...7.5 High
- jetbrains upsourceJetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block...6.1 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for...7.5 High
- fasterxml jackson-databind, debian linux, fedoraproject fedora +23 more +25 morejackson-databind polymorphic typing issue9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 morePolymorphic Typing in FasterXML jackson-databind9.8 Critical
- jetbrains riderJetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin...7.8 High
- jetbrains hubIn JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to...5.3 Medium
- jetbrains youtrackJetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when...6.1 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some...7.5 High
- jetbrains vimThe JetBrains Vim plugin before version 0.52 was storing individual project data in the global...5.3 Medium
- glyphandcog xpdfreaderCatalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized...5.5 Medium
- snowtide pdfxstreamIn Snowtide PDFxStream before 3.7.1 (for Java), a crafted PDF file can trigger an extremely long...5.5 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is...5.4 Medium
- Show moreLoading…