CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- isc bind, bind9 +1 moreAn oversight while backporting a feature leads to an assertion failure in buffer.c:4205.9 Medium
- elastic logstashLogstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats...7.5 High
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in Elasticsearch5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in...8.0 High
- adobe magentoAn insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2...6.5 Medium
- rpcbindrpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink...7.1 High
- rpcbindrpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can...7.8 High
- sugarcrmSugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which...9.8 Critical
- osgeo mapserverMapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile...7.5 High
- qtumqtum through 0.16 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service...7.5 High
- ikiwiki, debian linux +1 moreikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks.8.2 High
- trms carousel digital signageAn issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to...8.8 High
- trms carousel digital signageThe Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload...8.8 High
- trms seneca hdn firmwareThe Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a...8.8 High
- gmerA stack based buffer overflow vulnerability exists in the method receiving data from...5.5 Medium
- fabrikar fabrikReflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the...6.1 Medium
- ikiwikiCross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert...6.1 Medium
- opera miniOpera Mini for Android allows attackers to bypass intended restrictions on .apk file download...9.8 Critical
- mercurialMercurial Improper Certificate Validation vulnerability5.9 Medium
- sahipro sahi proSahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different...6.1 Medium
- kaspersky turbovncTurboVNC server code contains stack buffer overflow vulnerability in commit prior to...9.8 Critical
- labkey serverAn issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in...8.8 High
- kaspersky tightvncTightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which...7.5 High
- kaspersky tightvncTightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function,...9.8 Critical
- kaspersky tightvncTightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can...9.8 Critical
- kaspersky tightvncTightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function,...9.8 Critical
- labkey serverAn issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to...5.4 Medium
- labkey serverAn issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the...7.5 High
- sequelizeSQL Injection in sequelize9.8 Critical
- kaspersky libvnc, canonical ubuntu linux, debian linux +7 more +9 moreLibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in...7.5 High
- maxthon browserUnquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.7.2 High
- mediawiki checkuserAn issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive...6.5 Medium
- mediawiki abusefilterAn issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Previously...5.3 Medium
- cezerinCezerin Unauthorized Acces7.5 High
- schneider-electric modicon m340 firmware, modicon m580 firmware, tsxmcpc002m firmware +20 more +22 moreA CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon...7.5 High
- schneider-electric modicon bmenoc 0311 firmware, modicon bmenoc 0321 firmware, modicon m580 firmware +2 moreA CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and...7.5 High
- schneider-electric modicon bmenoc 0311 firmware, modicon bmenoc 0321 firmware, modicon m580 firmware +2 moreA CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and...7.5 High
- schneider-electric modicon bmenoc 0311 firmware, modicon bmenoc 0321 firmware, modicon m580 firmware +2 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon BMENOC 0311, and...8.6 High
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580,...6.5 Medium
- schneider-electric modicon m340 firmware, modicon m580 firmware, tsxmcpc002m firmware +20 more +22 moreA CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580,...7.5 High
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...4.9 Medium
- openafs, debian linux +1 moreOpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability...7.5 High
- openafs, debian linux +1 moreOpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error...5.9 Medium
- openafsOpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data...7.5 High
- postgresqlPostgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable...7.8 High
- mediawikimediawiki allows deleted text to be exposed7.5 High
- Show moreLoading…