CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- activesoft mybuilderMyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via...9.8 Critical
- activesoft mybuilderActiveX Control in MyBuilder before 6.2.2019.814 allow an attacker to execute arbitrary command...9.8 Critical
- suse linux enterprise server 12, linux enterprise server 15, linux enterprise server +2 moresquid: /usr/sbin/pinger packaged with wrong permission5.1 Medium
- sitos sixAn unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to...9.8 Critical
- sitos sixA Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows...6.1 Medium
- sitos sixSITOS six Build v6.2.1 allows a user to change their password and recovery email address without...6.5 Medium
- sitos sixSITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by...9.8 Critical
- sitos sixSITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their...8.8 High
- sitos sixSITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an...9.8 Critical
- elementor page builderThe elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2...6.1 Medium
- twitter kitThe Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com...7.4 High
opensshDebianopenssh - regression updateNo score- intelliantech remote accessIntellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell...9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +9 more +11 moreImproper Input Validation in jackson-databind9.8 Critical
- gnome libsoup, canonical ubuntu linux +1 morelibsoup through 2.68.1 has a heap-based buffer over-read because soup_ntlm_parse_challenge() in...9.8 Critical
- liblnk project liblnkIn libyal liblnk before 20191006, liblnk_location_information_read_data in...3.3 Low
- libfwsi project libfwsiIn libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in...3.3 Low
- bluditbl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection...3.7 Low
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.11 allows XSS via the Site Admin > Module Manager > Search Term field.4.8 Medium
- intelliants subrionSubrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an ...5.4 Medium
- vzug combi-stream mslq firmwareAn issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05...9.8 Critical
- vzug combi-stream mslq firmwareAn issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05...9.8 Critical
- vzug combi-stream mslq firmwareAn issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05...8.8 High
- vzug combi-stream mslq firmwareAn issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05...9.1 Critical
- vzug combi-stream mslq firmwareAn issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05...8.8 High
- webarxsecurity webarxThe WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X...6.1 Medium
- webarxsecurity webarxThe WebARX plugin 1.3.0 for WordPress allows firewall bypass by appending &cc=1 to a URI.7.5 High
- streebog project streebogIncorrect implementation in streebog7.5 High
- streebog project streebogIncorrect implementation of the Streebog hash functions in streebog7.5 High
- redis wrapper project wrapperUncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scripts9.8 Critical
- teampassTeamPass Stored Cross-site Scripting5.4 Medium
- teampassTeamPass Stored Cross-site Scripting5.4 Medium
- teampassTeamPass Stored Cross-site Scripting6.1 Medium
- webpagetestwww/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading...7.5 High
- open-emr openemrOpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library...9.8 Critical
- signal private messengerThe Signal Private Messenger application before 4.47.7 for Android allows a caller to force a...7.5 High
- signal private messenger** DISPUTED ** The WebRTC component in the Signal Private Messenger application through 4.47.7...9.8 Critical
- xerox atlalink firmwareXerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software...9.8 Critical
- fecmallAn unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in...7.2 High
- python pillow, fedoraproject fedora +1 moreDOS attack in Pillow when processing specially crafted image files7.5 High
- foxitsoftware readerFoxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists.7.5 High
- valvesoftware steam clientValve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem...7.8 High
- hp arcsight loggerStored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1...5.4 Medium
- hp arcsight loggerUnrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later....8.8 High
- open-emr openemrXSS in library/custom_template/add_template.php in OpenEMR through 5.0.2 allows a malicious user...6.1 Medium
realms-shimnpm,sesnpm +1 moreSandbox Breakout in realms-shim9.8 Critical- fon wireless limited fon2601e-se, fon2601e-re, fon2601e-fsw-s, and fon2601e-fsw-b, fon fon2601e-fsw-b firmware, fon2601e-fsw-s firmware +2 more +4 moreFON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and...7.5 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- Show moreLoading…