CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- jnoj jiangnan online judgeJiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web...6.1 Medium
- jnoj jiangnan online judgeJiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web...6.1 Medium
- laravel-bjyblog project laravel-bjybloglaravel-bjyblog 6.1.1 has XSS via a crafted URL.6.1 Medium
- cobham plc explorer 710, cobham explorer 710 firmware +1 moreThe Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image7.8 High
- cobham plc explorer 710, cobham explorer 710 firmware +1 moreThe root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.089.8 Critical
- cobham plc explorer 710, cobham explorer 710 firmware +1 moreThe web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext7.8 High
- cobham plc explorer 710, cobham explorer 710 firmware +1 moreThe web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to a port that can run AT commands9.8 Critical
- cobham plc explorer 710, cobham explorer 710 firmware +1 moreThe web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files5.5 Medium
- cobham plc explorer 710, cobham explorer 710 firmware +1 moreThe web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default5.5 Medium
- eleopard animate it\!The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.8.8 High
- softing uagate si firmwareAn issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command...8.8 High
- softing uagate si firmwareAn issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is...7.5 High
- softing uagate 840d firmware, uagate mb firmware, uagate si firmware +2 moreAn issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI...8.8 High
- softing uagate si firmwareAn issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable...9.8 Critical
- arista extensible operating systemA vulnerability has been found in the implementation of the Label Distribution Protocol (LDP)...5.9 Medium
- nongnu libntlm, canonical ubuntu linux, debian linux +3 more +5 moreLibntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge,...9.8 Critical
- axiosys bento4Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListInspector::Action in Core...6.5 Medium
- axiosys bento4Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core...6.5 Medium
- axiosys bento4Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descriptor::GetTag in Core/Ap4Descriptor.h,...6.5 Medium
- vmware fusion, workstation and fusion, workstation +2 moreVMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper...4.7 Medium
- vmware esxi, fusion, horizon +2 more +4 moreESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the...8.8 High
- robot-cpa robotcpaThe RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.7.5 High
- gnu binutils, canonical ubuntu linux, opensuse leap +2 morefind_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...6.5 Medium
- advancedcustomfields acf fronted displayThe ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an...9.8 Critical
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...6.5 Medium
- no-margin-for-error prettyphotoprettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS.6.1 Medium
- vernissage project vernissageThe Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.8.8 High
- teardrop project teardropThe Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.8.8 High
- pont project pontThe Pont theme 1.5 for WordPress has insufficient restrictions on option updates.8.8 High
- simpolio project simpolioThe Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.8.8 High
- estrutura-basica project estrutura-basicaThe estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the...7.5 High
- monitorbacklinks incoming linksThe incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP...6.1 Medium
- digitalzoomstudio zoomsoundsThe dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload.9.8 Critical
- s3bubble s3bubble-amazon-s3-audio-streamingThe s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the...7.5 High
- ionadas history collectionThe history-collection plugin through 1.1.1 for WordPress has directory traversal via the...7.5 High
- cybercraftit content-grabberThe content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id.4.8 Medium
- k-78 broken link managerThe broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL...6.1 Medium
- k-78 broken link managerThe broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL...9.8 Critical
- webtechideas wti like postThe wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via...9.8 Critical
- yet another stars rating project another stars ratingThe yet-another-stars-rating plugin before 0.9.1 for WordPress has...8.8 High
- s3bubble s3bubble-amazon-s3-html-5-video-with-advertsThe s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal...7.5 High
- avira software updaterAvira Software Updater before 2.0.6.21094 allows a DLL side-loading attack.6.7 Medium
- awesome filterable portfolio project filterable portfolioThe awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page...7.2 High
- brinidesigner awesome filterable portfolioThe awesome-filterable-portfolio plugin before 1.9 for WordPress has...7.2 High
- pinpoint booking systemThe booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL...8.8 High
- seo searchterms tagging 2 project searchterms tagging 2The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options...6.1 Medium
- seo searchterms tagging 2 project searchterms tagging 2The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the...7.2 High
- caseproof prettylinksThe pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL...7.2 High
- netsarang xftpNetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused...9.8 Critical
- ibm maximo anywhereIBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which...2.4 Low
- Show moreLoading…