CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 moreTiki Wiki CMS Groupware 5.2 has CSRF8.8 High
- translatehouse pootlepootle 2.0.5-0.2 has XSS via 'match_names' parameter6.1 Medium
- compal ch7465lg firmwareThe web interface of the Compal Broadband CH7465LG modem (version CH7465LG-NCIP-6.12.18.25-2p6...5.3 Medium
- mcafee total protection, mcafee, lcc mcafee total protection +1 moreFile masquerade attack vulnerability in McAfee Total Protection7.5 High
- pixelpostpixelpost 1.7.1-5 has XSS6.1 Medium
- pixelpostpixelpost 1.7.1-5 has SQL injection9.8 Critical
- mailscannermailscanner can allow local users to prevent virus signatures from being updated5.5 Medium
- terra-master f2-210 firmwareAn issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for...8.8 High
- zoo project zooZoo 2.10-27 has Directory traversal7.5 High
- snoopy project snoopySnoopy 2.0.0-1 has a security hole in exec cURL9.8 Critical
- libpod project libpodPodman Symlink Vulnerability5.5 Medium
- inea me-rtu firmware, mitsubishielectric smartrtu firmware +1 moreAn issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU...6.5 Medium
- inea me-rtu firmware, mitsubishielectric smartrtu firmware +1 moreAn issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU...9.8 Critical
- inea me-rtu firmware, mitsubishielectric smartrtu firmware +1 moreAn issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU...9.8 Critical
- inea me-rtu firmware, mitsubishielectric smartrtu firmware +1 moreAn issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU...9.8 Critical
- inea me-rtu firmware, mitsubishielectric smartrtu firmware +1 moreAn issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU...5.4 Medium
- inea me-rtu firmware, mitsubishielectric smartrtu firmware +1 moreAn issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU...7.5 High
- inea me-rtu firmware, mitsubishielectric smartrtu firmware +1 moreAn issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU...9.8 Critical
- rconfigAn issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by...8.8 High
- rconfigAn issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by...9.8 Critical
- corehr core portalCoreHR Core Portal before 27.0.7 allows stored XSS.6.1 Medium
- labf nfsaxeBuffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely.9.8 Critical
- foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdfThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- netapp clustered data ontapClustered Data ONTAP versions 9.2 through 9.6 are susceptible to a vulnerability which allows an...7.5 High
- honeywell ip-ak2 firmwareIn IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the...5.3 Medium
- philips intellispace perinatalIn IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace...6.8 Medium
- carel pcoweb firmwareRittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 ? B1.2.4....9.8 Critical
- carel pcoweb firmwareRittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 ? B1.2.4....7.5 High
- youphptubeAn exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6....7.4 High
- youphptubeAn exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6....7.4 High
- youphptubeAn exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6....7.4 High
- youphptubeSpecially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a...7.4 High
- youphptubeSQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially...7.4 High
- youphptubeSQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Specially...7.4 High
- youphptubeExploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6....7.4 High
- youphptubeAn exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6....7.4 High
- youphptube, youphptube encoder +1 moreA command injection have been found in YouPHPTube Encoder. A successful attack could allow an...10.0 Critical
- youphptube, youphptube encoder +1 moreA command injection have been found in YouPHPTube Encoder. A successful attack could allow an...10.0 Critical
- youphptube encoderA command injection have been found in YouPHPTube Encoder. A successful attack could allow an...10.0 Critical
- codesys, codesys eni server +1 more3S-Smart CODESYS V2.3 ENI server V3.2.2.23 has a Buffer Overflow.9.8 Critical
- ibm cloud orchestratorIBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response...5.4 Medium
- ibm cloud orchestratorIBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker...4.3 Medium
- ibm cloud orchestratorIBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected...5.9 Medium
- Show moreLoading…