CVEs published in October 2019
1,571 vulnerabilities, 242 critical, 7 exploited.
- jetbrains youtrackIn JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the...5.3 Medium
- jetbrains toolboxIn JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.7.3 High
- mumble, debian linux +1 moreMumble: murmur-server has DoS due to malformed client query6.5 Medium
- zte zxmp m721 dx firmware, zte corporation zxmp m721 dx +1 moreA security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3...5.7 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow...9.8 Critical
- jupyter notebookCross-site scripting in Jupyter Notebook5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a...5.3 Medium
- jetbrains mpsJetBrains MPS before 2019.2.2 exposed listening ports to the network.5.3 Medium
- jetbrains intellij ideaJetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading...5.3 Medium
- jetbrains hubIn JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through...5.3 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS...9.8 Critical
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via...6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of...8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS...7.5 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...8.8 High
- apakgroup wholesale floorplanning financeApak Wholesale Floorplanning Finance 6.31.8.3 and 6.31.8.5 allows XSS via the mainForm...6.1 Medium
- totaldefense anti-virusThe malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug;...5.9 Medium
- totaldefense anti-virusThe quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to...5.5 Medium
- ikiwikiA cross-site scripting (XSS) vulnerability in ikiwiki before 3.20101112 allows remote attackers...6.1 Medium
- transmission, debian linux +1 moreTransmission before 1.92 allows attackers to prevent download of a file by corrupted data during...5.3 Medium
- transmission, debian linux +1 moreTransmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have...9.8 Critical
- red hat jboss, redhat jboss operations network +1 moreA missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not...8.0 High
- themooltipass moolticuteAn issue was discovered in Mooltipass Moolticute through v0.42.1 and v0.42.x-testing through v0...7.5 High
- systemd project systemd, fedoraproject fedora +1 moresystemd 239 through 243 accepts any certificate signed by a trusted certificate authority for DNS...9.8 Critical
- europa eidas-node integration packageEuropean Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate...9.8 Critical
- europa eidas-node integration packageEuropean Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because...9.8 Critical
- medooSQL Injection in medoo9.8 Critical
- autokey project autokeyThe init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via...6.5 Medium
- apache airflowApache Airflow vulnerable to XSS and local file disclosure4.8 Medium
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion...6.5 Medium
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local...6.5 Medium
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special...6.5 Medium
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via...8.8 High
- xpdfreader xpdf, poppler +1 moreIn xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial...5.5 Medium
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request...6.5 Medium
- clipsoft rexpertClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When...5.3 Medium
- capturecctv cdr 0410ve firmware, cdr 0820vde firmware, hachi hv-04rd pro firmware +17 more +19 moreAuthentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi...7.5 High
- xpdfxpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in...5.5 Medium
- zucchetti infobusinessIn Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client...5.4 Medium
- zucchetti infobusinessA cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including...8.8 High
- zucchetti infobusinessMultiple Reflected Cross-site Scripting (XSS) vulnerabilities exist in Zucchetti InfoBusiness...6.1 Medium
- zucchetti infobusinessZucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php...8.8 High
- sir gnuboardGNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or...6.1 Medium
- arubanetworks instant, siemens w1750d firmware +1 moreAruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and...7.5 High
whoopsieUbuntuwhoopsie regressionNo score- Show moreLoading…