CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- gpw, debian linux +1 moregpw generates shorter passwords than required7.5 High
- bitlbeeBitlbee does not drop extra group privileges correctly in unix.c9.8 Critical
- asterisk, debian linux +1 moreasterisk allows calls on prohibited networks7.5 High
- ytnefytnef has directory traversal9.8 Critical
- qtparted project qtpartedqtparted has insecure library loading which may allow arbitrary code execution9.8 Critical
- grsecurity paxtest, debian linux +1 morepaxtest handles temporary files insecurely5.5 Medium
- axodraw2 project axodraw2, axohelp.c project axohelp.c +1 moreIn axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other...9.8 Critical
- apport project apport, canonical ubuntu linux +1 moreApport reads PID files with elevated privileges2.8 Low
- samba, fedoraproject fedora, opensuse leap +2 moreA flaw was found in samba 4.0.0 until samba 4.10.9. An attacker can crash AD DC LDAP server via...4.9 Medium
- samba, fedoraproject fedora, opensuse leap +2 moreA flaw was found in Samba, all versions starting samba 4.5.0 until samba 4.9.15, samba 4.10.10,...4.2 Medium
- apport project apport, canonical ubuntu linux +1 moreapport created lock file in wrong directory3.3 Low
- canonical whoopsie, ubuntu linux +1 moreInteger overflow in bson_ensure_space6.3 Medium
- apport project apport, canonical ubuntu linux +1 moreSander Bos discovered Apport mishandled crash dumps originating from containers. This could be...7.0 High
- apport project apport, canonical ubuntu linux +1 moreRace condition between reading current working directory and writing a core dump4.2 Medium
- samba, fedoraproject fedora +1 moreA flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15,...5.3 Medium
- postgresqlPostgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable...6.7 Medium
- ibm api connectIBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an...5.3 Medium
- ibm maximo health- safety and environment manager, maximo for oil and gas, maximo health\, safety and environment manager +2 moreAfter installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted...5.4 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic...5.9 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for...3.1 Low
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input...4.3 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in...5.9 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to...5.3 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses hard coded credentials which could...5.9 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in...5.1 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security...6.5 Medium
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreLoop with Unreachable Exit Condition in Apache Thrift7.5 High
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreOut-of-bounds read in Apache Thrift7.5 High
- vmware sd-wan by velocloudIn VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter...4.3 Medium
- archiver project archiverPath Traversal in MHolt Archiver5.5 Medium
- sequelizeSQL Injection in sequelize9.8 Critical
- mikrotik routeros, tenable mikrotik routeros +1 moreRouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where...7.5 High
- mikrotik routeros, tenable mikrotik routeros +1 moreRouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated...7.5 High
- mikrotik routeros, tenable mikrotik routeros +1 moreRouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated...7.5 High
- mikrotik routeros, tenable mikrotik routeros +1 moreRouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary...8.8 High
- apache hadoopHadoop symlink vulnerability7.5 High
- cisco video communications server (vcs), telepresence video communication server +1 moreCisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability...7.2 High
- trendmicro apex one, officescan, worry-free business security +1 more +3 moreA directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free...9.8 Critical
- trend micro apex oneTrend Micro Apex One could be exploited by an attacker utilizing a command injection...7.5 High
- trend micro officescanTrend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a...7.5 High
- devada dzone answerhubAn XML External Entity Injection vulnerability exists in Dzone AnswerHub.7.5 High
- repetier-serverA directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8...9.8 Critical
- intrasrv project intrasrvA remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may...9.8 Critical
- python keyring, python keyring lib keyring lib, debian linux +2 moreIncorrect Default Permissions in keyring7.5 High
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation ...6.5 Medium
- vmware vcenter server, vcenter server appliance +1 moreSensitive information disclosure vulnerability resulting from a lack of certificate validation...5.9 Medium
- vmware vcenter server, vcenter server appliance +1 moreSensitive information disclosure vulnerability resulting from a lack of certificate validation...5.9 Medium
- k7computing k7 antivirus premium, k7 total security, k7 ultimate security +2 moreIn K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120;...9.8 Critical
- tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 moreTiki Wiki CMS Groupware 5.2 has Local File Inclusion9.8 Critical
- tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 moreTiki Wiki CMS Groupware 5.2 has XSS6.1 Medium
- Show moreLoading…