| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-16713 | Med | 0.42 | 6.5 | 0.02 | Sep 23, 2019 | ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c. | ||
| CVE-2019-16712 | Med | 0.42 | 6.5 | 0.03 | Sep 23, 2019 | ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image. | ||
| CVE-2019-16711 | Med | 0.42 | 6.5 | 0.02 | Sep 23, 2019 | ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c. | ||
| CVE-2019-16710 | Med | 0.42 | 6.5 | 0.02 | Sep 23, 2019 | ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c. | ||
| CVE-2019-16709 | Med | 0.42 | 6.5 | 0.03 | Sep 23, 2019 | ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage. | ||
| CVE-2019-16708 | Med | 0.42 | 6.5 | 0.02 | Sep 23, 2019 | ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage. | ||
| CVE-2019-16707 | Med | 0.42 | 6.5 | 0.02 | Sep 23, 2019 | Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. | ||
| CVE-2019-16706 | Hig | 0.57 | 8.8 | 0.01 | Sep 23, 2019 | kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php. | ||
| CVE-2019-16705 | Cri | 0.59 | 9.1 | 0.02 | Sep 23, 2019 | Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a. | ||
| CVE-2019-16704 | Med | 0.31 | 4.8 | 0.01 | Sep 23, 2019 | admin/infoclass_update.php in PHPMyWind 5.6 has stored XSS. | ||
| CVE-2019-16703 | Med | 0.40 | 6.1 | 0.01 | Sep 23, 2019 | admin/infolist_add.php in PHPMyWind 5.6 has stored XSS. | ||
| CVE-2019-16702 | Cri | 0.68 | 9.8 | 0.11 | Sep 23, 2019 | Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /LoginAdmin URI. | ||
| CVE-2019-16696 | Cri | 0.64 | 9.8 | 0.02 | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used. | ||
| CVE-2019-16695 | Cri | 0.64 | 9.8 | 0.02 | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used. | ||
| CVE-2019-16694 | Cri | 0.64 | 9.8 | 0.02 | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used. | ||
| CVE-2019-16693 | Cri | 0.67 | 9.8 | 0.04 | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used. | ||
| CVE-2019-16692 | Cri | 0.68 | 9.8 | 0.10 | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used. | ||
| CVE-2018-21018 | Cri | 0.64 | 9.8 | 0.03 | Sep 22, 2019 | Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions. | ||
| CVE-2019-16681 | Med | 0.31 | 4.7 | 0.01 | Sep 21, 2019 | The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitrary URLs, which can inject deceptive content into the UI. (When in physical possession of the device, opening local files is also… | ||
| CVE-2019-16680 | Med | 0.21 | 4.3 | 0.02 | Sep 21, 2019 | An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction. | ||
| CVE-2019-16679 | Med | 0.35 | 4.9 | 0.07 | Sep 21, 2019 | Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion. | ||
| CVE-2019-16678 | Med | 0.42 | 6.5 | 0.01 | Sep 21, 2019 | admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route. | ||
| CVE-2019-16677 | Med | 0.42 | 6.5 | 0.00 | Sep 21, 2019 | An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF. | ||
| CVE-2019-16669 | Med | 0.35 | 5.3 | 0.01 | Sep 21, 2019 | The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts. | ||
| CVE-2019-16665 | Med | 0.40 | 6.1 | 0.01 | Sep 21, 2019 | An issue was discovered in ThinkSAAS 2.91. There is XSS via the content to the index.php?app=group&ac=comment&ts=do&js=1 URI, as demonstrated by a crafted SVG document in the SRC attribute of an EMBED element. | ||
| CVE-2019-16664 | Med | 0.31 | 4.8 | 0.01 | Sep 21, 2019 | An issue was discovered in ThinkSAAS 2.91. There is XSS via the index.php?app=group&ac=create&ts=do groupname parameter. | ||
| CVE-2019-16661 | Med | 0.35 | 5.4 | 0.01 | Sep 21, 2019 | Ogma CMS 0.5 has XSS via creation of a new blog. | ||
| CVE-2019-16660 | Hig | 0.57 | 8.8 | 0.01 | Sep 21, 2019 | joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF. | ||
| CVE-2019-16659 | Hig | 0.57 | 8.8 | 0.01 | Sep 21, 2019 | TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF. | ||
| CVE-2019-16658 | Hig | 0.57 | 8.8 | 0.01 | Sep 21, 2019 | TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF. | ||
| CVE-2019-16657 | Med | 0.40 | 6.1 | 0.01 | Sep 21, 2019 | TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/. | ||
| CVE-2019-16656 | Cri | 0.64 | 9.8 | 0.01 | Sep 21, 2019 | joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database. | ||
| CVE-2019-16655 | Hig | 0.49 | 7.5 | 0.01 | Sep 21, 2019 | joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available. | ||
| CVE-2019-16650 | Cri | 0.65 | 10.0 | 0.02 | Sep 21, 2019 | On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual… | ||
| CVE-2019-16649 | Cri | 0.65 | 10.0 | 0.01 | Sep 21, 2019 | On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect… | ||
| CVE-2019-6650 | Cri | 0.59 | 9.1 | 0.01 | Sep 20, 2019 | F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and allow the system configuration to be modified when using non-default settings. | ||
| CVE-2019-6649 | Cri | 0.59 | 9.1 | 0.01 | Sep 20, 2019 | F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings. | ||
| CVE-2019-6145 | Med | 0.44 | 6.7 | 0.01 | Sep 20, 2019 | Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg… | ||
| CVE-2019-15138 | Hig | 0.42 | 7.5 | 0.02 | Sep 20, 2019 | The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL. | ||
| CVE-2015-9406 | Hig | 0.56 | 7.5 | 0.59 | Sep 20, 2019 | Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php. | ||
| CVE-2014-10397 | Hig | 0.49 | 7.5 | 0.03 | Sep 20, 2019 | The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php. | ||
| CVE-2014-10396 | Hig | 0.49 | 7.5 | 0.03 | Sep 20, 2019 | The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php. | ||
| CVE-2019-16645 | Hig | 0.60 | 8.6 | 0.08 | Sep 20, 2019 | An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack. | ||
| CVE-2019-14816 | Hig | 0.51 | 7.8 | 0.01 | Sep 20, 2019 | There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code. | ||
| CVE-2019-14814 | Hig | 0.51 | 7.8 | 0.01 | Sep 20, 2019 | There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code. | ||
| CVE-2019-11327 | Med | 0.32 | 4.9 | 0.01 | Sep 20, 2019 | An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product has a local file inclusion vulnerability. An attacker with administrative privileges can craft a special URL to read arbitrary files from the device's… | ||
| CVE-2019-11326 | Hig | 0.57 | 8.8 | 0.01 | Sep 20, 2019 | An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product is protected by a login. A guest is allowed to login. Once logged in as a guest, an attacker can browse a URL to read the password of the… | ||
| CVE-2019-11280 | Hig | 0.57 | 8.8 | 0.01 | Sep 20, 2019 | Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote… | ||
| CVE-2018-17789 | Med | 0.42 | 6.5 | 0.01 | Sep 20, 2019 | Prospecta Master Data Online (MDO) allows CSRF. | ||
| CVE-2019-5521 | Cri | 0.63 | 9.6 | 0.02 | Sep 20, 2019 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain an out-of-bounds read vulnerability in the pixel shader functionality.… |
- risk 0.42cvss 6.5epss 0.02
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
- risk 0.42cvss 6.5epss 0.03
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
- risk 0.42cvss 6.5epss 0.02
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
- risk 0.42cvss 6.5epss 0.02
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
- risk 0.42cvss 6.5epss 0.03
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
- risk 0.42cvss 6.5epss 0.02
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.
- risk 0.42cvss 6.5epss 0.02
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
- risk 0.57cvss 8.8epss 0.01
kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.
- risk 0.59cvss 9.1epss 0.02
Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a.
- risk 0.31cvss 4.8epss 0.01
admin/infoclass_update.php in PHPMyWind 5.6 has stored XSS.
- risk 0.40cvss 6.1epss 0.01
admin/infolist_add.php in PHPMyWind 5.6 has stored XSS.
- risk 0.68cvss 9.8epss 0.11
Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /LoginAdmin URI.
- risk 0.64cvss 9.8epss 0.02
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used.
- risk 0.64cvss 9.8epss 0.02
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used.
- risk 0.64cvss 9.8epss 0.02
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used.
- risk 0.67cvss 9.8epss 0.04
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.
- risk 0.68cvss 9.8epss 0.10
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.
- risk 0.64cvss 9.8epss 0.03
Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.
- risk 0.31cvss 4.7epss 0.01
The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitrary URLs, which can inject deceptive content into the UI. (When in physical possession of the device, opening local files is also…
- risk 0.21cvss 4.3epss 0.02
An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.
- risk 0.35cvss 4.9epss 0.07
Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.
- risk 0.42cvss 6.5epss 0.01
admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.
- risk 0.42cvss 6.5epss 0.00
An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.
- risk 0.35cvss 5.3epss 0.01
The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in ThinkSAAS 2.91. There is XSS via the content to the index.php?app=group&ac=comment&ts=do&js=1 URI, as demonstrated by a crafted SVG document in the SRC attribute of an EMBED element.
- risk 0.31cvss 4.8epss 0.01
An issue was discovered in ThinkSAAS 2.91. There is XSS via the index.php?app=group&ac=create&ts=do groupname parameter.
- risk 0.35cvss 5.4epss 0.01
Ogma CMS 0.5 has XSS via creation of a new blog.
- risk 0.57cvss 8.8epss 0.01
joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF.
- risk 0.57cvss 8.8epss 0.01
TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.
- risk 0.57cvss 8.8epss 0.01
TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.
- risk 0.40cvss 6.1epss 0.01
TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.
- risk 0.64cvss 9.8epss 0.01
joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database.
- risk 0.49cvss 7.5epss 0.01
joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.
- risk 0.65cvss 10.0epss 0.02
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual…
- risk 0.65cvss 10.0epss 0.01
On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect…
- risk 0.59cvss 9.1epss 0.01
F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and allow the system configuration to be modified when using non-default settings.
- risk 0.59cvss 9.1epss 0.01
F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings.
- risk 0.44cvss 6.7epss 0.01
Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg…
- risk 0.42cvss 7.5epss 0.02
The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.
- risk 0.56cvss 7.5epss 0.59
Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php.
- risk 0.49cvss 7.5epss 0.03
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php.
- risk 0.49cvss 7.5epss 0.03
The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php.
- risk 0.60cvss 8.6epss 0.08
An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack.
- risk 0.51cvss 7.8epss 0.01
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
- risk 0.51cvss 7.8epss 0.01
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
- risk 0.32cvss 4.9epss 0.01
An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product has a local file inclusion vulnerability. An attacker with administrative privileges can craft a special URL to read arbitrary files from the device's…
- risk 0.57cvss 8.8epss 0.01
An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product is protected by a login. A guest is allowed to login. Once logged in as a guest, an attacker can browse a URL to read the password of the…
- risk 0.57cvss 8.8epss 0.01
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote…
- risk 0.42cvss 6.5epss 0.01
Prospecta Master Data Online (MDO) allows CSRF.
- risk 0.63cvss 9.6epss 0.02
VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain an out-of-bounds read vulnerability in the pixel shader functionality.…