CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...5.5 Medium
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote atackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote atackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote atackers to execute arbitrary code on affected installations of...7.8 High
- freerdp, opensuse leap +1 morelibfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks...7.5 High
- freerdp, lodev lodepng, opensuse leap +2 moreHuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in...7.5 High
- joyplus-cms project joyplus-cmsjoyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.7.5 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 is vulnerable to cross-site scripting...6.1 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to...5.3 Medium
- ibm mqIBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners...5.6 Medium
- apache hadoopuser/group information can be corrupted across storing in fsimage and reading back from fsimage7.5 High
ansible1SUSE,ardana-ansibleSUSE,ardana-clusterSUSE +59 more +61 moreSecurity update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, a…No score- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not...9.8 Critical
- vbulletinvBulletin through 5.5.4 mishandles custom avatars.9.8 Critical
- vbulletinvBulletin before 5.5.4 allows clickjacking.4.3 Medium
- vbulletinvBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core...6.5 Medium
- vanderbilt redcapREDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record...5.4 Medium
- liferay portalLiferay Portal Allows RCE via Deserialization of a JSON Payload9.8 Critical
- openmpt libopenmptIn libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName...9.8 Critical
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- android-gif-drawable project android-gif-drawable, whatsapp +1 moreandroid-gif-drawable Double Free vulnerability8.8 High
- kslabs kswebKSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter.6.5 Medium
- kslabs kswebThe KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote...8.8 High
- rpyc project rpycDuplicate Advisory: Possible remote code execution via a remote procedure call7.5 High
- nlnetlabs unbound, canonical ubuntu linux +1 moreUnbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a...7.5 High
- tcpdump libpcaprpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture...5.3 Medium
- themeisle visualizerA stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated...6.1 Medium
- tcpdump libpcaprpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL...7.5 High
- tcpdump libpcaprpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why...5.3 Medium
- tcpdump libpcaprpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a...5.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to...5.3 Medium
- ibm security guardiumIBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could...8.8 High
- redhat jboss operations network, apache struts +1 moreIt was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON)...5.6 Medium
- matrixsslMatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This...5.9 Medium
- wolfsslwolfCrypt leaks cryptographic information via timing side channel4.7 Medium
- athena-scs idprotect, microchip atmel toolbox, tecsec armored card +2 more +4 moreSmart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the...4.7 Medium
- serde cbor project cborOut of bounds write in serde_cbor7.5 High
- microfocus enterprise developer, enterprise server +1 moreReflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to...6.1 Medium
- facebook hhvmInsufficient boundary checks when formatting numbers in number_format allows read/write access to...9.8 Critical
- Show moreLoading…