CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- zingbox inspectorAn SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1...8.8 High
- zingbox inspectorIn the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and...8.4 High
- zingbox inspectorA command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier,...8.8 High
- zohocorp manageengine datasecurity plusAn issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed...4.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PKI key pairs are exported with insecure file permissions6.6 Medium
- juniper sbr carrierSBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.5.6 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devices configured with Multi-Chassis Link Aggregation Group (MC-LAG)6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Session fixation vulnerability in J-Web7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: flowd process crash due to processing of specific transit IP packets7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.7.8 High
- juniper junos, juniper networks junos os +1 moreNFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.6.8 Medium
- juniper junos, juniper networks junos os +1 moreSRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Persistent XSS vulnerability in J-Web8.8 High
- dell avamar, emc avamar server, emc integrated data protection appliance +1 more +3 moreDell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data...8.1 High
- mantisbtMantisBT Remote Code Execution7.2 High
- iterm2iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command execution9.8 Critical
- netapp snapmanagerSnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when...5.5 Medium
- openprojectAn XSS vulnerability in project list in OpenProject before 9.0.4 and 10.x before 10.0.2 allows...6.1 Medium
- liblnk project liblnklibyal liblnk 20191006 has a heap-based buffer over-read in the network_share_name_offset>20 code...3.3 Low
- netapp clustered data ontapClustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain...5.9 Medium
- joomlashack shack forms proThe Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.9.8 Critical
- riot-os riotIn RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read...7.5 High
- kramerav viawareKramer VIAware 2.5.0719.1034 has Incorrect Access Control.9.8 Critical
- eleopard animate it\!The animate-it plugin before 2.3.5 for WordPress has XSS.6.1 Medium
- eleopard animate it\!The animate-it plugin before 2.3.4 for WordPress has XSS.6.1 Medium
- sma sunny webbox, sunny webbox firmware +1 moreAn attacker could send a malicious link to an authenticated operator, which may allow remote...8.8 High
- envoyproxy envoyUpon receiving each incoming request header data, Envoy will iterate over existing request...7.5 High
- cpanelcPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528).6.1 Medium
- cpanelcPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).6.1 Medium
- cpanelcPanel before 82.0.15 allows self XSS in the SSL Key Delete interface (SEC-526).6.1 Medium
- cpanelcPanel before 82.0.15 allows self XSS in LiveAPI example scripts (SEC-524).6.1 Medium
- cpanelcPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521).6.1 Medium
- cpanelcPanel before 82.0.15 allows API token credentials to persist after an account has been renamed...8.8 High
- netreo omnicenterNetreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in...7.5 High
- Show moreLoading…