CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- boaBoa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition...9.8 Critical
- dlink dap-1320 a2 firmwareD-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as...7.5 High
- gree gree\+The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request...8.8 High
indicoPyPIHigh severity vulnerability that affects indicoNo score- google androidIn generateServicesMap of RegisteredServicesCache.java, there is a possible account protection...5.5 Medium
- android kernel, debian linux, google android +75 more +77 moreA use-after-free in binder.c allows an elevation of privilege from an application to the Linux...7.8 High
- google androidIn nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an...5.5 Medium
- google androidIn the default privileges of NFC, there is a possible local bypass of user interaction...7.8 High
- google androidIn ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a...5.5 Medium
- google androidIn GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing...8.8 High
- google androidIn VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to...8.8 High
- google androidIn PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write...8.8 High
- google androidIn startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch...7.8 High
- smartit premium responsive project premium responsiveThe ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote...7.5 High
- blessing premium responsive project premium responsiveThe ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote...7.5 High
- gamestheme premium project premiumThe ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers...7.5 High
- goodnex premium responsive project premium responsiveThe ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote...7.5 High
- almera responsive portfolio site template project responsive portfolio site templateThe ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for...7.5 High
- almera responsive portfolio project responsive portfolioThe ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote...7.5 High
- axioma premium responsive project premium responsiveThe ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote...7.5 High
- accio responsive onepage parallax site template project responsive onepage parallax site templateThe ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for...7.5 High
- accio one page parallax responsive theme project one page parallax responsive themeThe ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows...7.5 High
- invento \/ architecture building agency template project \/ architecture building agency templateThe ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for...7.5 High
- car dealer \/ auto dealer responsive project dealer \/ auto dealer responsiveThe ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows...7.5 High
- intel nuc 8 mainstream game kit firmware, nuc 8 mainstream game mini computer firmware, nuc board de3815tybe firmware +3 more +5 moreMemory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially...7.8 High
- diplomat \| political project \| politicalThe ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote...7.5 High
- intel nuc 8 mainstream game kit firmware, nuc 8 mainstream game mini computer firmware, nuc board de3815tybe firmware +3 more +5 morePointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially...7.8 High
- intel smart connect technology, intel® smart connect technology for intel® nuc advisory +1 moreImproper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R)...7.8 High
- intel active system console, intel® active system console advisory +1 moreInsufficient path checking in the installer for Intel(R) Active System Console before version 8.0...7.8 High
- samsung laser printers, hp samsung c480 firmware, samsung clp680 firmware +2 more +4 moreA potential security vulnerability has been identified with Samsung Laser Printers. This...7.5 High
- sophos cyberoamosA shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before...9.8 Critical
- kirona dynamic resource schedulingAn issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated...5.3 Medium
- kirona dynamic resource schedulingAn issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross...6.1 Medium
- hp touchpoint analyticsA potential security vulnerability has been identified with certain versions of HP Touchpoint...6.7 Medium
- sodiumoxide project sodiumoxideIncorrect Comparison in sodiumoxide9.8 Critical
- kaseya vsaAn issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration,...6.7 Medium
- icewarp webclientIceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss...7.5 High
- icewarp webclientIceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss...7.5 High
- icewarp webclientIceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the...6.1 Medium
- icewarp webclientIceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the...6.1 Medium
- icewarp webclientIceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the...6.1 Medium
- icewarp webclientIceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the...6.1 Medium
- icewarp webclientIceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter...6.1 Medium
- compal ch7465lg firmwareThe setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4...8.8 High
- pdf-xchange editorTracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using...6.5 Medium
- craftcms craft cmsCraft CMS XSS Vulnerability6.1 Medium
- smartbear swagger ui, oracle banking apis, banking digital experience +3 more +5 moreCross-site scripting in Swagger-UI9.8 Critical
- b3log symphonyb3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.6.1 Medium
- jnoj jiangnan online judgeJiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon...6.1 Medium
- jnoj jiangnan online judgeapp\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0...8.8 High
- Show moreLoading…