| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-15710 | Hig | 0.47 | 7.2 | 0.02 | Oct 31, 2019 | An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands. | ||
| CVE-2013-2024 | Hig | 0.58 | 8.8 | 0.05 | Oct 31, 2019 | OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0. | ||
| CVE-2013-2012 | Hig | 0.40 | 7.3 | 0.00 | Oct 31, 2019 | autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory. | ||
| CVE-2013-1951 | Med | 0.33 | 6.1 | 0.02 | Oct 31, 2019 | A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names. | ||
| CVE-2013-1945 | Low | 0.21 | 3.3 | 0.00 | Oct 31, 2019 | ruby193 uses an insecure LD_LIBRARY_PATH setting. | ||
| CVE-2013-1934 | Med | 0.35 | 5.4 | 0.01 | Oct 31, 2019 | A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script or HTML via a complex value. | ||
| CVE-2013-1932 | Med | 0.28 | 5.4 | 0.01 | Oct 31, 2019 | A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name. | ||
| CVE-2013-1931 | Med | 0.33 | 6.1 | 0.02 | Oct 31, 2019 | A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version. | ||
| CVE-2013-1930 | Med | 0.21 | 4.3 | 0.01 | Oct 31, 2019 | MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues. | ||
| CVE-2019-18657 | Med | 0.35 | 5.3 | 0.01 | Oct 31, 2019 | ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. | ||
| CVE-2013-1910 | Cri | 0.64 | 9.8 | 0.03 | Oct 31, 2019 | yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository. | ||
| CVE-2019-14356 | Med | 0.35 | 5.3 | 0.01 | Oct 31, 2019 | On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the… | ||
| CVE-2019-18656 | Med | 0.33 | 6.1 | 0.01 | Oct 31, 2019 | Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements. | ||
| CVE-2019-18465 | Cri | 0.64 | 9.8 | 0.01 | Oct 31, 2019 | In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface. The vulnerability affects only certain SSH (SFTP) configurations, and is applicable only if the MySQL… | ||
| CVE-2019-18464 | Cri | 0.64 | 9.8 | 0.02 | Oct 31, 2019 | In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3), multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the… | ||
| CVE-2019-16251 | Med | 0.28 | 4.3 | 0.01 | Oct 31, 2019 | plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes. | ||
| CVE-2019-12612 | Hig | 0.51 | 7.8 | 0.00 | Oct 31, 2019 | An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and… | ||
| CVE-2019-3421 | Hig | 0.52 | 8.0 | 0.01 | Oct 31, 2019 | The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. Unauthorized users can exploit this vulnerability to control the user terminal system. | ||
| CVE-2019-3419 | Med | 0.37 | 5.7 | 0.01 | Oct 31, 2019 | A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability to build a link to the device and send specific packets to cause a denial of service. | ||
| CVE-2019-18369 | Med | 0.35 | 5.3 | 0.01 | Oct 31, 2019 | In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible. | ||
| CVE-2019-18368 | Hig | 0.48 | 7.3 | 0.01 | Oct 31, 2019 | In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible. | ||
| CVE-2019-18367 | Med | 0.35 | 5.3 | 0.01 | Oct 31, 2019 | In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions. | ||
| CVE-2019-18366 | Med | 0.35 | 5.3 | 0.01 | Oct 31, 2019 | In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission. | ||
| CVE-2019-18365 | Med | 0.28 | 4.3 | 0.01 | Oct 31, 2019 | In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages. | ||
| CVE-2010-2490 | Med | 0.35 | 6.5 | 0.02 | Oct 31, 2019 | Mumble: murmur-server has DoS due to malformed client query | ||
| CVE-2009-5043 | Cri | 0.64 | 9.8 | 0.01 | Oct 31, 2019 | burn allows file names to escape via mishandled quotation marks | ||
| CVE-2009-5042 | Cri | 0.59 | 9.1 | 0.01 | Oct 31, 2019 | python-docutils allows insecure usage of temporary files | ||
| CVE-2009-5041 | Cri | 0.64 | 9.8 | 0.01 | Oct 31, 2019 | overkill has buffer overflow via long player names that can corrupt data on the server machine | ||
| CVE-2019-18364 | Cri | 0.64 | 9.8 | 0.04 | Oct 31, 2019 | In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution. | ||
| CVE-2019-18363 | Med | 0.35 | 5.3 | 0.01 | Oct 31, 2019 | In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances. | ||
| CVE-2019-18362 | Med | 0.35 | 5.3 | 0.01 | Oct 31, 2019 | JetBrains MPS before 2019.2.2 exposed listening ports to the network. | ||
| CVE-2019-18361 | Med | 0.34 | 5.3 | 0.00 | Oct 31, 2019 | JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution. | ||
| CVE-2019-18360 | Med | 0.35 | 5.3 | 0.01 | Oct 31, 2019 | In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery. | ||
| CVE-2018-21030 | Med | 0.28 | 5.3 | 0.01 | Oct 31, 2019 | Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document. | ||
| CVE-2019-18425 | Cri | 0.64 | 9.8 | 0.03 | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missing descriptor table limit checking in x86 PV emulation. When emulating certain PV guest operations, descriptor table… | ||
| CVE-2019-18424 | Med | 0.44 | 6.8 | 0.01 | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device. This occurs because passed through PCI devices may corrupt host memory after deassignment. When a PCI… | ||
| CVE-2019-18423 | Hig | 0.57 | 8.8 | 0.02 | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() to sanity check guest physical frame.… | ||
| CVE-2019-18422 | Hig | 0.57 | 8.8 | 0.02 | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling of interrupts. Interrupts are unconditionally unmasked in exception handlers. When an exception occurs on an ARM system… | ||
| CVE-2019-18421 | Hig | 0.49 | 7.5 | 0.02 | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations. There are issues with restartable PV type change operations. To avoid using shadow pagetables for… | ||
| CVE-2019-18420 | Med | 0.42 | 6.5 | 0.03 | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via a VCPUOP_initialise hypercall. hypercall_create_continuation() is a variadic function which uses a printf-like format string to interpret its parameters. Error handling… | ||
| CVE-2019-17551 | Med | 0.40 | 6.1 | 0.01 | Oct 31, 2019 | In Apak Wholesale Floorplanning Finance 6.31.8.3 and 6.31.8.5, an attacker can send an authenticated POST request with a malicious payload to /WFS/agreementView.faces allowing a stored XSS via the mainForm:loanNotesnotes:0:rich_text_editor_note_text parameter in the Notes… | ||
| CVE-2019-18645 | Med | 0.36 | 5.5 | 0.00 | Oct 31, 2019 | The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be written to privileged directories. | ||
| CVE-2019-18644 | Med | 0.38 | 5.9 | 0.01 | Oct 31, 2019 | The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, symbolic link attacks allow privileged files to be deleted. | ||
| CVE-2010-1673 | Med | 0.40 | 6.1 | 0.01 | Oct 30, 2019 | A cross-site scripting (XSS) vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a comment. | ||
| CVE-2010-0749 | Med | 0.35 | 5.3 | 0.02 | Oct 30, 2019 | Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame. | ||
| CVE-2010-0748 | Cri | 0.64 | 9.8 | 0.02 | Oct 30, 2019 | Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link. | ||
| CVE-2010-0747 | Hig | 0.51 | 7.8 | 0.00 | Oct 30, 2019 | drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725. | ||
| CVE-2010-0737 | Hig | 0.52 | 8.0 | 0.01 | Oct 30, 2019 | A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user. | ||
| CVE-2019-18635 | Hig | 0.42 | 7.5 | 0.02 | Oct 30, 2019 | An issue was discovered in Mooltipass Moolticute through v0.42.1 and v0.42.x-testing through v0.42.5-testing. There is a NULL pointer dereference in MPDevice_win.cpp. | ||
| CVE-2019-18633 | Cri | 0.64 | 9.8 | 0.01 | Oct 30, 2019 | European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected. |
- risk 0.47cvss 7.2epss 0.02
An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.
- risk 0.58cvss 8.8epss 0.05
OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.
- risk 0.40cvss 7.3epss 0.00
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory.
- risk 0.33cvss 6.1epss 0.02
A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.
- risk 0.21cvss 3.3epss 0.00
ruby193 uses an insecure LD_LIBRARY_PATH setting.
- risk 0.35cvss 5.4epss 0.01
A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script or HTML via a complex value.
- risk 0.28cvss 5.4epss 0.01
A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name.
- risk 0.33cvss 6.1epss 0.02
A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.
- risk 0.21cvss 4.3epss 0.01
MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.
- risk 0.35cvss 5.3epss 0.01
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.
- risk 0.64cvss 9.8epss 0.03
yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository.
- risk 0.35cvss 5.3epss 0.01
On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the…
- risk 0.33cvss 6.1epss 0.01
Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.
- risk 0.64cvss 9.8epss 0.01
In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface. The vulnerability affects only certain SSH (SFTP) configurations, and is applicable only if the MySQL…
- risk 0.64cvss 9.8epss 0.02
In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3), multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the…
- risk 0.28cvss 4.3epss 0.01
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
- risk 0.51cvss 7.8epss 0.00
An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and…
- risk 0.52cvss 8.0epss 0.01
The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. Unauthorized users can exploit this vulnerability to control the user terminal system.
- risk 0.37cvss 5.7epss 0.01
A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability to build a link to the device and send specific packets to cause a denial of service.
- risk 0.35cvss 5.3epss 0.01
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
- risk 0.48cvss 7.3epss 0.01
In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.
- risk 0.35cvss 5.3epss 0.01
In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.
- risk 0.35cvss 5.3epss 0.01
In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.
- risk 0.28cvss 4.3epss 0.01
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.
- risk 0.35cvss 6.5epss 0.02
Mumble: murmur-server has DoS due to malformed client query
- risk 0.64cvss 9.8epss 0.01
burn allows file names to escape via mishandled quotation marks
- risk 0.59cvss 9.1epss 0.01
python-docutils allows insecure usage of temporary files
- risk 0.64cvss 9.8epss 0.01
overkill has buffer overflow via long player names that can corrupt data on the server machine
- risk 0.64cvss 9.8epss 0.04
In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.
- risk 0.35cvss 5.3epss 0.01
In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances.
- risk 0.35cvss 5.3epss 0.01
JetBrains MPS before 2019.2.2 exposed listening ports to the network.
- risk 0.34cvss 5.3epss 0.00
JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution.
- risk 0.35cvss 5.3epss 0.01
In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery.
- risk 0.28cvss 5.3epss 0.01
Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.
- risk 0.64cvss 9.8epss 0.03
An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missing descriptor table limit checking in x86 PV emulation. When emulating certain PV guest operations, descriptor table…
- risk 0.44cvss 6.8epss 0.01
An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device. This occurs because passed through PCI devices may corrupt host memory after deassignment. When a PCI…
- risk 0.57cvss 8.8epss 0.02
An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() to sanity check guest physical frame.…
- risk 0.57cvss 8.8epss 0.02
An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling of interrupts. Interrupts are unconditionally unmasked in exception handlers. When an exception occurs on an ARM system…
- risk 0.49cvss 7.5epss 0.02
An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations. There are issues with restartable PV type change operations. To avoid using shadow pagetables for…
- risk 0.42cvss 6.5epss 0.03
An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via a VCPUOP_initialise hypercall. hypercall_create_continuation() is a variadic function which uses a printf-like format string to interpret its parameters. Error handling…
- risk 0.40cvss 6.1epss 0.01
In Apak Wholesale Floorplanning Finance 6.31.8.3 and 6.31.8.5, an attacker can send an authenticated POST request with a malicious payload to /WFS/agreementView.faces allowing a stored XSS via the mainForm:loanNotesnotes:0:rich_text_editor_note_text parameter in the Notes…
- risk 0.36cvss 5.5epss 0.00
The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be written to privileged directories.
- risk 0.38cvss 5.9epss 0.01
The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, symbolic link attacks allow privileged files to be deleted.
- risk 0.40cvss 6.1epss 0.01
A cross-site scripting (XSS) vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a comment.
- risk 0.35cvss 5.3epss 0.02
Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.
- risk 0.64cvss 9.8epss 0.02
Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
- risk 0.51cvss 7.8epss 0.00
drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725.
- risk 0.52cvss 8.0epss 0.01
A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.
- risk 0.42cvss 7.5epss 0.02
An issue was discovered in Mooltipass Moolticute through v0.42.1 and v0.42.x-testing through v0.42.5-testing. There is a NULL pointer dereference in MPDevice_win.cpp.
- risk 0.64cvss 9.8epss 0.01
European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is not checked. NOTE: only 2.1 is confirmed to be affected.