CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- elog, fedoraproject fedora +1 moreELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after...7.5 High
- elog, fedoraproject fedora +1 moreELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote...7.5 High
- elog, fedoraproject fedora +1 moreELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote...7.5 High
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting8.1 High
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources7.7 High
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users5.3 Medium
- tibco spotfire analyst, spotfire analytics platform for aws, spotfire deployment kit +3 more +5 moreTIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files7.6 High
- sap enterprise extension financial services, treasury and risk management \(s4core\), sap se treasury and risk management (ea-finserv) +1 more +3 moreTransaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1...8.8 High
- sap enterprise extension financial services, treasury and risk management \(s4core\), sap se treasury and risk management (ea-finserv) +1 more +3 moreTransaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1...8.8 High
- linux kernelIn the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have...7.8 High
- altn mdaemon email serverMDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.5.4 Medium
- joomlaworks k2, verot project verot +1 moreclass.upload.php in verot.net omits .pht from the set of dangerous file extensions9.8 Critical
- typo3TYPO3 Insecure Deserialization in Query Generator & Query View8.8 High
- typo3TYPO3 SQL Injection in low-level Query Generator5.5 Medium
- typo3TYPO3 Directory Traversal on ZIP extraction6.8 Medium
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to...6.5 Medium
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's...6.5 Medium
- acer quick accessIn the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access V2.01.3000 through 2.01.3027...7.8 High
- divisait dv2eemvc, proxia phr, proxia suite +1 more +3 moreDivisa Proxia Suite 9 < 9.12.16, 9.11.19, 9.10.26, 9.9.8, 9.8.43 and 9.7.10, 10.0 < 10.0.32, and...9.8 Critical
- libspiro project libspiroLibspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in...8.1 High
- nalpeiron licensing serviceNLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products,...7.1 High
- ivanti workspace controlIn Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges...7.8 High
- jenkins project alauda kubernetes suport plugin, jenkins alauda kubernetes support +1 moreImproper Authorization in Jenkins Alauda Kubernetes Suport Plugin6.5 Medium
- jenkins project alauda kubernetes suport plugin, jenkins alauda kubernetes support +1 moreCross-Site Request Forgery in Jenkins Alauda Kubernetes Suport Plugin8.8 High
- jenkins alauda devops pipeline, jenkins project alauda devops pipeline plugin +1 moreJenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins6.5 Medium
- jenkins alauda devops pipeline, jenkins project alauda devops pipeline plugin +1 moreJenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgery8.8 High
- jenkins weibo, jenkins project weibo plugin +1 moreJenkins Weibo Plugin stores credentials unencrypted in its global configuration file5.5 Medium
- jenkins rapiddeploy, jenkins project rapiddeploy plugin +1 moreJenkins RapidDeploy Plugin missing permission check4.3 Medium
- jenkins rapiddeploy, jenkins project rapiddeploy plugin +1 moreJenkins RapidDeploy Plugin Cross-Site Request Forgery plugin8.8 High
- jenkins mantis, jenkins project mantis plugin +1 moreCSRF vulnerability in Jenkins Mantis Plugin4.3 Medium
- jenkins sctmexecutor, jenkins project sctmexecutor plugin +1 moreJenkins SCTMExecutor Plugin stores credentials in plain text5.3 Medium
- jenkins team concert, jenkins project team concert plugin +1 moreJenkins Team Concert Plugin missing permission check4.3 Medium
- jenkins team concert, jenkins project team concert plugin +1 moreJenkins Team Concert Plugin missing permission check6.5 Medium
- jenkins team concert, jenkins project team concert plugin +1 moreJenkins Team Concert Plugin cross-site request forgery vulnerability8.8 High
- jenkins pipeline aggregator view, jenkins project pipeline aggregator view plugin +1 moreJenkins Pipeline Aggregator View Plugin stored XSS vulnerability5.4 Medium
- jenkins mission control, jenkins project mission control plugin +1 moreCross site scripting in Jenkins Mission Control Plugin5.4 Medium
- jenkins buildgraph-view, jenkins project buildgraph-view plugin +1 moreJenkins buildgraph-view Plugin vulnerable to stored Cross-site Scripting5.4 Medium
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreSSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin7.1 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreCross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin8.8 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreJenkins WebSphere Deployer Plugin missing permission check5.4 Medium
- jenkins spira importer, jenkins project spira importer plugin +1 moreImproper Certificate Validation in Jenkins Spira Importer Plugin8.2 High
- jenkins redgate sql change automation, jenkins project redgate sql change automation plugin +1 moreJenkins Redgate SQL Change Automation Plugin has Insufficiently Protected Credentials6.5 Medium
- jenkins rundeck, jenkins project rundeck plugin +1 moreJenkins Rundeck Plugin stored credentials in plain text6.5 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreInefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin6.5 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreMissing permission check in Jenkins Build Failure Analyzer Plugin4.3 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreCross-Site Request Forgery in Jenkins Build Failure Analyzer Plugin8.8 High
- jenkins gerrit trigger, jenkins project gerrit trigger plugin +1 moreMissing permission check in Jenkins Gerrit Trigger Plugin5.4 Medium
- jenkins gerrit trigger, jenkins project gerrit trigger plugin +1 moreCross-Site Request Forgery in Jenkins Gerrit Trigger Plugin8.8 High
- jenkins maven, jenkins project maven release plugin +1 moreCross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin8.8 High
- jenkins maven, jenkins project maven release plugin +1 moreJenkins Maven Release Plug-in Plugin XXE vulnerability8.1 High
- Show moreLoading…