CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...4.6 Medium
- oracle retail xstore point of serviceVulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications ...2.7 Low
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported...5.3 Medium
- oracle database server, oracle corporation database +1 moreVulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are...4.3 Medium
- oracle retail xstore officeVulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component...5.4 Medium
- oracle database server, oracle corporation database +1 moreVulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are...5.0 Medium
- oracle corporation micros relate crm software, oracle micros relate customer relationship management software +1 moreVulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications (component:...5.9 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting via outgoing email setup feature5.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting vulnerability5.4 Medium
- cybelsoft thinvncThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server...9.8 Critical
drupal/batPackagistThe Bat module provides a foundation through which a wide range of availability management, reservation and booking use cases can be addressed. The routes used to view events don't sufficiently guard…No score- limesurveyA cross-site scripting (XSS) vulnerability in admin/translate/translateheader_view.php in...6.1 Medium
- pivotal rabbitmq, rabbitmq for pcf, debian linux +3 more +5 moreRabbitMQ XSS attack2.4 Low
- hp futuresmart 3, futuresmart 4 +1 moreHP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to...9.8 Critical
- eu cookie law project cookie lawThe eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to...4.8 Medium
- managewp broken link checkerThe broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is...6.1 Medium
- pixelite events managerThe events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to...5.4 Medium
- semperplugins all in one seo packThe all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is...5.4 Medium
- jenkins puppet enterprise pipelineIncorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin9.9 Critical
- jenkins oracle cloud infrastructure compute classic, jenkins project oracle cloud infrastructure compute classic plugin +1 moreMissing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin4.3 Medium
- jenkins oracle cloud infrastructure compute classic, jenkins project oracle cloud infrastructure compute classic plugin +1 moreJenkins Oracle Cloud Infrastructure Compute Classic Plugin cross-site request forgery vulnerability4.3 Medium
- jenkins rundeck, jenkins project rundeck plugin +1 moreMissing permission check in Jenkins Rundeck Plugin4.3 Medium
- jenkins rundeck, jenkins project rundeck plugin +1 moreJenkins Rundeck Plugin CSRF vulnerability4.3 Medium
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin vulnerable to Cleartext credential storage7.8 High
- jenkins view26 test-reporting, jenkins project view26 test-reporting plugin +1 moreJenkins View26 Test-Reporting Plugin stores access token in plain text4.3 Medium
- jenkins soasta cloudtest, jenkins project soasta cloudtest plugin +1 moreJenkins SOASTA CloudTest Plugin stores API token in plain text4.3 Medium
- jenkins elasticbox ci, jenkins project elasticbox ci plugin +1 moreCleartext Storage of Sensitive Information in Jenkins ElasticBox CI Plugin3.3 Low
- jenkins fortify on demand, jenkins project fortify on demand plugin +1 moreJenkins Fortify on Demand Plugin stores credentials in plain text8.8 High
- jenkins extensive testing, jenkins project extensive testing plugin +1 moreCleartext Storage of Sensitive Information in Jenkins Extensive Testing Plugin8.8 High
- jenkins sofy.ai, jenkins project sofy.ai plugin +1 moreJenkins Sofy.AI Plugin stores API token in plain text4.3 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreJenkins Cadence vManager Plugin disables SSL/TLS and hostname verification8.2 High
- jenkins google kubernetes engine, jenkins project google kubernetes engine plugin +1 moreMissing permission checks in Google Kubernetes Engine Jenkins Plugin4.3 Medium
- jenkins bumblebee hp alm, jenkins project bumblebee hp alm plugin +1 moreJenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation6.5 Medium
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin stores credentials in Cleartext8.8 High
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin vulnerable to Missing Authorization4.3 Medium
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin vulnerable to Cross-site Request Forgery4.3 Medium
- jenkins neoload, jenkins project neoload plugin +1 moreJenkins NeoLoad Plugin stores credentials in cleartext8.8 High
- jenkins crx content package deployer, jenkins project crx content package deployer plugin +1 moreJenkins CRX Content Package Deployer Plugin subject to credentials enumeration via Missing Authorization4.3 Medium
- jenkins crx content package deployer, jenkins project crx content package deployer plugin +1 moreJenkins CRX Content Package Deployer Plugin subject to Missing Authorization6.5 Medium
- jenkins crx content package deployer, jenkins project crx content package deployer plugin +1 moreJenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery8.8 High
- jenkins google oauth credentials, jenkins project google oauth credentials plugin +1 moreImproper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin6.5 Medium
- ibm workload scheduler distributed, tivoli workload scheduler +1 moreIBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could...8.4 High
- sonatype nexus repository managerSonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution.7.2 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the ...4.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the ...4.8 Medium
- yalehome yale bluetooth keyThe Yale Bluetooth Key application for mobile devices allows unauthorized unlock actions by...6.5 Medium
- reportlabXML Injection in ReportLab9.8 Critical
- ramboxRambox RCE Vulnerability9.0 Critical
- x.org x serverIn X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap....7.8 High
- netgear jnr1010 firmwareNETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the...9.8 Critical
- Show moreLoading…