CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- centreonlicenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a...9.8 Critical
- apache tomee, bouncycastle bc-java, netapp active iq unified manager +18 more +20 moreOut-of-Memory Error in Bouncy Castle Crypto7.5 High
- dbell db01-s firmwareThe dbell Wi-Fi Smart Video Doorbell DB01-S Gen 1 allows remote attackers to launch commands with...9.8 Critical
- vbulletinvBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget...4.9 Medium
- centreon webLocal file inclusion in brokerPerformance.php in Centreon Web before 2.8.28 allows attackers to...6.1 Medium
- centreon webminPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute...8.8 High
- centreon webCentreon Sensitive Data Exposure6.5 Medium
- centreon vmCentreon Does Not Set HTTPOnly Flag7.5 High
- centreon vmCentreon Privilege Escalation9.8 Critical
- centreon webgetStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary...8.8 High
- centreon webmakeXML_ListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections...8.8 High
- jfinalJFinal file validation vulnerability7.5 High
- centreon webimg_gantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the...8.8 High
- centreon webIn very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web...7.5 High
- auth0 auth0.netImproper Authentication in Auth0.AuthenticationApi7.5 High
- hrworksHRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.5.4 Medium
- hrworksHRworks 3.36.9 allows XSS via the purpose of a travel-expense report.5.4 Medium
- yeahlink t49g firmware, t58v firmware, vp59 firmware +2 moreYealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as...8.8 High
- yeahlink t49g firmware, t58v firmware, vp59 firmware +2 moreYealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently...8.8 High
rustsec-example-cratecrates.ioTest advisory with associated example crateNo score- irfanviewIrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting...7.8 High
- irfanviewIrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR...5.5 Medium
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at DPX!ReadDPX_W+0x0000000000001203.7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836.7.8 High
- irfanviewIrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting...7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at JPEG_LS+0x000000000000a6b8.7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at FORMATS!Read_BadPNG+0x0000000000000115.7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d43.7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000042f5.7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d57b.7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000025b6.7.8 High
- irfanviewIrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting...7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000258c.7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x0000000000004359.7.8 High
- irfanviewIrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS...7.8 High
- irfanviewIrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS...7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000966f.7.8 High
- irfanviewIrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d563.7.8 High
- xnviewXnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.7.8 High
- xnviewXnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.7.8 High
- mpc-hcMPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpc_hc...7.8 High
- kmplayerKMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!src_new+0x000000000014d6ee.7.8 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of...8.8 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a...6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...8.8 High
- debian linux, xen +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...7.8 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of...5.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of...5.5 Medium
- Show moreLoading…