CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- fujitsu lx390 firmwareAn issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack...9.8 Critical
- zenspider ruby parser-legacyRuby_parser-legacy Incorrect Permission Assignment for Critical Resource7.8 High
- fortinet fortiosAn Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1 and below for device not...7.5 High
- fujitsu lx390 firmwareAn issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack...6.6 Medium
- fortinet forticlient, forticlient for windows +1 moreA malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows...7.8 High
- libarchive, canonical ubuntu linux, debian linux +2 morearchive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0...7.5 High
- dormsystem project dormsystemtonyy dormsystem through 1.3 allows DOM XSS.6.1 Medium
- ibm maximo asset management, maximo for aviation, maximo for life sciences +6 more +8 moreIBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm cloud orchestratorIBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through...5.4 Medium
- ibm cloud orchestrator, cloud orchestrator enterprise +1 moreIBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through...4.0 Medium
- ibm cloud orchestrator, cloud orchestrator enterprise +1 moreIBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through...5.3 Medium
- qemu, debian linux, fedoraproject fedora +2 more +4 moreThe ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service ...6.5 Medium
- igniterealtime openfireIgnite Realtime Openfire vulnerable to Server Side Request Forgery9.8 Critical
- igniterealtime openfireIgnite Realtime Openfire directory traversal vulnerability5.3 Medium
- typestack class-validator project class-validatorSQL Injection and Cross-site Scripting in class-validator3.7 Low
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCE8.7 High
- hotel and lodge management system project and lodge management systemSourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL...9.8 Critical
- eclipse wild web developer, theia xml extension project xml extension, xml language server project server project +2 moreXML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka...8.8 High
- eclipse wild web developer, theia xml extension project xml extension, xml language server project server project +2 moreXMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML...6.5 Medium
- avstar pe204 firmwareAn issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur...7.5 High
- terra-master fs-210 firmwareAn issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files...7.5 High
- terra-master fs-210 firmwareAn issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non...6.5 Medium
- terra-master fs-210 firmwareAn issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can...7.5 High
- adobe creative cloud desktop application, creative cloud +1 moreCreative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier; 2019.010.20099 and earlier versions...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20034 and earlier; 2019.012.20035 and earlier versions...9.8 Critical
- mi millet router 3g firmwareAn issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory...7.5 High
- mi millet router 3g firmwareAn issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is...9.8 Critical
- apache poi, oracle application testing suite, banking enterprise originations +24 more +26 moreImproper Restriction of XML External Entity Reference in Apache POI5.5 Medium
- glensawyer mp3gainA buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The...5.5 Medium
- forcepoint one endpointThis vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint ...6.5 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.6.0 and earlier were found to contain a Denial of Service vulnerability due to...6.5 Medium
- thycotic secret serverAn XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2).6.1 Medium
- thycotic secret serverAn XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 1 of 2).6.1 Medium
- thycotic secret serverAn SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.9.8 Critical
- darktrace enterprise immune systemDarktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint.6.5 Medium
- darktrace enterprise immune systemDarktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint.6.5 Medium
- gnu gccInteger overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified...7.8 High
- ant.design ant design proIn Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the...6.1 Medium
- projectfloodlight open sdn controllerA vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a...7.5 High
- avast antivirus, avg anti-virus +1 moreAn issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL...7.8 High
- projectfloodlight open sdn controllerA vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an...7.5 High
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 Medium
- fusionpbxIn FusionPBX up to 4.5.7, the file app\extensions\extension_imports.php uses an unsanitized ...6.1 Medium
- hexo-admin project hexo-adminhexo-admin plugin for Node.js XSS Vulnerability6.1 Medium
- awesomemotive easy digital downloadsThe Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x...6.1 Medium
- awesomemotive easy digital downloads, easydigitaldownloads amazon s3 +1 moreThe Easy Digital Downloads (EDD) Amazon S3 extension for WordPress, as used with EDD 1.8.x before...6.1 Medium
- weeklynews theme project themeThe weeklynews theme before 2.2.9 for WordPress has XSS via the s parameter.6.1 Medium
- awesomemotive easy digital downloads, easydigitaldownloads attach accounts to orders +1 moreThe Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress, as used with...6.1 Medium
- awesomemotive easy digital downloads, easydigitaldownloads commissions +1 moreThe Easy Digital Downloads (EDD) Commissions extension for WordPress, as used with EDD 1.8.x...6.1 Medium
- Show moreLoading…