CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- eq-3 homematic ccu3 firmwareeQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs...7.3 High
- eq-3 cux-daemon, ccu2 firmware +1 moreA Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU...8.8 High
- eq-3 cux-daemon, ccu2 firmware +1 moreA Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU...6.5 Medium
- metinfoapp/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user...8.8 High
- wordpress, debian linux +1 moreIn WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the...5.3 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE...6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because...7.5 High
- wordpress, debian linux +1 moreWordPress before 5.2.4 does not properly consider type confusion during validation of the referer...8.8 High
- wordpress, debian linux +1 moreWordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.5.4 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL...9.8 Critical
- samsung galaxy s10 firmware, note 10 firmware +1 moreSamsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in...6.8 Medium
- comtech h8 heights remote gateway firmwareComtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name ...5.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 morertl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6...8.8 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress()...7.8 High
- wordpress, debian linux +1 moreWordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows...9.8 Critical
kernelMageia,kmod-virtualboxMageia,kmod-xtables-addonsMageia +1 more +3 moreUpdated kernel packages fix various issuesNo score- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.6.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.6.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php dbusername parameter.6.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php dbname parameter.6.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php servername parameter.6.1 Medium
- nsa ghidraNSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a...7.8 High
- nsa ghidraNSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the...7.8 High
- mulesoft mule runtimeMulesoft Mule Unsafe Deserialization9.8 Critical
- url redirect project redirecturl_redirect for Typo3 SQLi Vulnerability7.3 High
- dkd direct maildirect_mail for Typo3 sensitive data exposure4.3 Medium
- sr freecap project freecapsr_freecap for Typo3 RCE Vulnerability9.8 Critical
- slub-dresden slub eventsslub_events for Typo3 Arbitrary File Upload9.8 Critical
- cisco telepresence collaboration endpoint, telepresence tc software +1 moreCisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability4.4 Medium
- cisco identity services engine softwareCisco Identity Services Engine Information Disclosure Vulnerability4.3 Medium
- cisco identity services engine softwareCisco Identity Services Engine Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco telepresence collaboration endpoint, telepresence tc software +1 moreCisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability6.4 Medium
- cisco telepresence collaboration endpoint, telepresence tc software +1 moreCisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability6.7 Medium
- cisco telepresence collaboration endpoint, telepresence tc software +1 moreCisco TelePresence Collaboration Endpoint Software Command Injection Vulnerability6.4 Medium
- cisco telepresence collaboration endpoint, telepresence tc software +1 moreCisco TelePresence Collaboration Endpoint Software Arbitrary File Overwrite Vulnerabilities6.0 Medium
- cisco firepower management center, firepower management center firmware +1 moreCisco Firepower Management Center Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco firepower management center, amp 7150 firmware, amp 8150 firmware +32 more +34 moreCisco Firepower Management Center Multiple Cross-Site Scripting Vulnerabilities4.8 Medium
- cisco firepower management center, amp 7150 firmware, amp 8150 firmware +32 more +34 moreCisco Firepower Management Center Multiple Cross-Site Scripting Vulnerabilities4.8 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Path Traversal Vulnerability4.4 Medium
- cisco aironet 1540 firmware, aironet 1560 firmware, aironet 1800 firmware +3 more +5 moreCisco Aironet Access Points Bridge Protocol Data Unit Port Disable Denial of Service Vulnerability7.4 High
- cisco aironet 1540 firmware, aironet 1560 firmware, aironet 1850 firmware +5 more +7 moreCisco Aironet Access Points and Catalyst 9100 Access Points CAPWAP Denial of Service Vulnerability7.4 High
- cisco wireless lan controller (wlc), 5508 wireless lan controller firmware, 5520 wireless lan controller firmware +2 moreCisco Wireless LAN Controller Secure Shell Denial of Service Vulnerability8.6 High
- cisco aironet 1810 firmware, aironet 1830 firmware, aironet 1850 firmware +1 more +3 moreCisco Aironet Access Points Point-to-Point Tunneling Protocol Denial of Service Vulnerability8.6 High
- cisco aironet 1540 firmware, aironet 1560 firmware, aironet 1800 firmware +4 more +6 moreCisco Aironet Access Points Unauthorized Access Vulnerability9.8 Critical
- cisco spa112 2-port phone adapter, spa112 firmware, spa122 firmware +2 moreCisco SPA100 Series Analog Telephone Adapters Web Management Interface Denial of Service Vulnerability6.5 Medium
- cisco spa112 2-port phone adapter, spa112 firmware, spa122 firmware +2 moreCisco SPA100 Series Analog Telephone Adapters Running Configuration Information Disclosure Vulnerability6.5 Medium
- cisco spa112 2-port phone adapter, spa112 firmware, spa122 firmware +2 moreCisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities8.0 High
- cisco spa112 2-port phone adapter, spa112 firmware, spa122 firmware +2 moreCisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities8.0 High
- cisco spa112 2-port phone adapter, spa112 firmware, spa122 firmware +2 moreCisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities8.0 High
- Show moreLoading…