CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- ibm cloud orchestratorIBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response...5.4 Medium
- ibm cloud orchestratorIBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a local user to...4.0 Medium
- ibm cloud orchestratorIBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be...2.3 Low
- ibm security access managerIBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of...7.5 High
- repetier-serverRepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data...9.8 Critical
- linksys ea6500 firmwareLinksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations...9.8 Critical
- tp-link tl-wdr4300 firmwareTP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.8.8 High
- dlink dir-865l firmwareD-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing...8.8 High
- dlink dir-865l firmwareD-Link DIR-865L has Information Disclosure.6.5 Medium
- dlink dir-865l firmwareD-Link DIR-865L has PHP File Inclusion in the router xml file.9.8 Critical
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery...6.5 Medium
- adobe experience managerAdobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability....9.8 Critical
- adobe experience managerAdobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection...7.5 High
- adobe experience managerAdobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection...7.5 High
- adobe experience managerAdobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability....6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection...7.5 High
- adobe experience managerAdobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass...7.5 High
- zend frameworkZend Framework Allows SQL Injection9.8 Critical
- milesight ip security cameras, ip security camera firmware +1 moreMilesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc...9.8 Critical
- milesight ip security cameras, ip security camera firmware +1 moreMilesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via...9.8 Critical
- milesight ip security cameras, ip security camera firmware +1 moreMilesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication...9.8 Critical
- milesight ip security cameras, ip security camera firmware +1 moreMilesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts...9.8 Critical
- milesight ip security cameras, ip security camera firmware +1 moreMilesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that...9.8 Critical
- golang go, arista cloudvision portal, eos +8 more +10 moreGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 High
- clonosclonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via...9.8 Critical
- clonosA cross-site scripting (XSS) vulnerability in index.php in ClonOS WEB control panel 19.09 allows...6.1 Medium
- restaurant management system project management systemSourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen.6.1 Medium
- sourcecodester restaurant management systemSourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload...8.8 High
- restaurant management system project management systemSourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member.6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.4 and 6.3 have a stored cross site scripting vulnerability....6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross site scripting...6.1 Medium
- sourcecodester restaurant management systemSourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site...8.8 High
- horde groupwareHorde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows...8.8 High
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3 and 6.2 have a reflected cross site scripting...6.1 Medium
- horde groupwareHorde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=update_f...6.1 Medium
- craftcms craft cmsCraft CMS possibility of brute force attempts9.8 Critical
- teamviewerA DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 ...6.7 Medium
- symantec messaging gatewaySymantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure...4.5 Medium
- schlix cmsadmin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload,...7.2 High
- wacom driverAn exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3,...7.8 High
- wacom driverAn exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3,...7.1 High
- tp-link m7350 firmwareTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command...9.8 Critical
- tp-link m7350 firmwareTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command...9.8 Critical
- tp-link m7350 firmwareTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command...9.8 Critical
- tp-link m7350 firmwareTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command...9.8 Critical
- tp-link m7350 firmwareTP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command...9.8 Critical
- maprA remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON...9.8 Critical
- fujitsu lx390 firmwareAn issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack...7.5 High
- Show moreLoading…