CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +16 more +18 moreAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly...7.8 High
- microsoft windows 10 mobileA security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to...6.8 Medium
- microsoft sql server management studioAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...6.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 moreA remote code execution vulnerability exists when the Windows Imaging API improperly handles...7.8 High
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 for 32-bit systems +19 more +21 moreOut-of-bounds write7.5 High
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 for 32-bit systems +19 more +21 moreOut-of-bounds write7.5 High
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems +5 more +7 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...6.4 Medium
- microsoft windows, windows server, windows 10 +2 more +4 moreAn information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host...6.8 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able...5.9 Medium
- microsoft sharepoint enterprise server, sharepoint foundation +1 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not...5.4 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +9 more +11 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft edge, internet explorer 10, internet explorer 11 +26 more +28 moreA spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka...4.3 Medium
- lavaliteLavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients...5.4 Medium
- laravel-adminz-song laravel-admin XSS via the Slug or Name on the Roles screen4.8 Medium
- fastadminAn issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/index.php/admin/auth...8.8 High
- fastadminAn issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/admin/general.config...6.5 Medium
- awplife contact form widgetThe new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9...9.8 Critical
- realbigplugins client dashThe client-dash (aka Client Dash) plugin 2.1.4 for WordPress allows XSS.6.1 Medium
- lqd liquid speech balloonThe liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin 1.0.5 for WordPress allows XSS with...6.1 Medium
- adhouma cms project cmsAdhouma CMS through 2019-10-09 has SQL Injection via the post.php p_id parameter.9.8 Critical
- eyoucmsEyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.6.1 Medium
- redmineIn Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting...6.1 Medium
- mongoosejs mongooseImproper Input Validation in Automattic Mongoose9.1 Critical
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +201 more +203 moreA vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...7.5 High
- oisf libhtp, suricata-ids suricata +1 moreIn OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol...5.3 Medium
- metinfoAn issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c...7.2 High
- metinfoAn issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=user&c=admin_user...7.2 High
- pbootcmsPbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and...4.8 Medium
- upredsun file sharing wizardA Structured Exception Handler (SEH) based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008...9.8 Critical
- vino project vinotinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service (...7.5 High
- koji project kojikoji hub allows arbitrary upload destinations6.5 Medium
- nixos nixNix through 2.3 allows local users to gain access to an arbitrary user's account because the...7.8 High
- citrix application delivery managementCitrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control.8.8 High
- nvidia shield experienceNVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability...7.8 High
- nvidia shield experienceNVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in...7.8 High
- gonitro nitropdfA specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522...8.8 High
- gonitro nitropdfA specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522...8.8 High
- gonitro nitropdfA specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when...8.8 High
- gonitro nitropdfA specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when...8.8 High
- gonitro nitropdfAn exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of...7.5 High
- gonitro nitropdfAn exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A...7.5 High
- zingbox inspectorA security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for...9.8 Critical
- zingbox inspectorA security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in...7.5 High
- zingbox inspectorA security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for...7.5 High
- zingbox inspectorA security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can...5.3 Medium
- zingbox inspectorA security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could...9.8 Critical
- zingbox inspectorA security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could...9.8 Critical
- zingbox inspectorA security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where...7.5 High
- zingbox inspectorThe SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to...8.4 High
- Show moreLoading…