CVEs published September 25, 2019
102 CVEs were published on September 25, 2019: 1 critical, 11 high.
- Published
- 102
- Critical
- 1
- High
- 11
- Medium
- 18
- Low
- 0
- Unrated
- 72
- Now in CISA KEV
- 0
- Fix available
- 33
Most affected products
- Cisco IOS XE Software
- 12
- Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- 6
- Cisco IOS XE Software 3.2.11aSG
- 5
- Jenkins Project Inheritance Plugin · hudson.plugins:project…
- 3
- BIG-IQ
- 2
- Cisco IOS XE Software 3.2.9SG
- 2
- Gigastone Smart Battery A4
- 2
- Jenkins project Jenkins Violation Comments to GitLab Plugin…
- 2
- @novnc/novnc
- 1
- Apache HTTP Server
- 1
Critical 1
High 11
- CVE-2019-12658Cisco IOS XE Software Filesystem Exhaustion Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2019-12656Cisco IOx Application Environment Denial of Service VulnerabilityCisco Industrial Routers Operating System Software
- CVE-2019-12654Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service VulnerabilityCisco IOS 15.0(1)XA2
- CVE-2019-12652Cisco Catalyst 4000 Series Switches TCP Denial of Service VulnerabilityCisco IOS 15.0(1)XO1
- CVE-2019-12657Cisco IOS XE Software Unified Threat Defense Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2019-12655Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2019-12653Cisco IOS XE Software Raw Socket Transport Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2019-12651Cisco IOS XE Software Web UI Command Injection VulnerabilitiesCisco IOS XE Software 3.2.11aSG
- CVE-2019-12647Cisco IOS and IOS XE Software IP Ident Denial of Service VulnerabilityCisco IOS
- CVE-2019-12650Cisco IOS XE Software Web UI Command Injection VulnerabilitiesCisco IOS XE Software 3.2.11aSG
- CVE-2019-12646Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service VulnerabilityCisco IOS XE Software
Medium, low and unrated 90
- CVE-2015-9418The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.
- CVE-2015-9417The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.
- CVE-2015-9416The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.
- CVE-2015-9415The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.
- CVE-2015-9414The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.
- CVE-2015-9413The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title paramete
- CVE-2015-9412The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter.
- CVE-2015-9411The Postmatic plugin before 1.4.6 for WordPress has XSS.
- CVE-2015-9410The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.
- CVE-2017-18635An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page@novnc/novnc
- CVE-2019-16253The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privil
- CVE-2019-16890Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.
- CVE-2019-12717Cisco NX-OS Software Virtualization Manager Command Injection VulnerabilityCisco NX-OS Software 5.0(3)A1
- CVE-2019-12672Cisco IOS XE Software Arbitrary Code Execution VulnerabilityCisco IOS XE Software
- CVE-2019-12670Cisco IOS XE Software IOx Guest Shell Namespace Protection VulnerabilityCisco IOS XE Software 3.2.11aSG
- CVE-2019-12668Cisco IOS and IOS XE Software Stored Banner Cross-Site Scripting VulnerabilityCisco IOS XE Software
- CVE-2019-12666Cisco IOS XE Software Path Traversal VulnerabilityCisco IOS XE Software
- CVE-2019-12664Cisco IOS XE Software ISDN Data Leak VulnerabilityCisco IOS XE Software
- CVE-2019-12662Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass VulnerabilityCisco NX-OS Software 6.0(2)A1
- CVE-2019-12660Cisco IOS XE Software ASIC Register Write VulnerabilityCisco IOS XE Software 3.2.11aSG
- CVE-2019-12709Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation VulnerabilityCisco IOS XR Software
- CVE-2019-12671Cisco IOS XE Software Consent Token Bypass VulnerabilityCisco IOS XE Software 3.2.9SG
- CVE-2019-12669Cisco IOS and IOS XE Software Change of Authorization Denial of Service VulnerabilityCisco IOS XE Software 3.2.9SG
- CVE-2019-12667Cisco IOS XE Software Stored Cross-Site Scripting VulnerabilityCisco IOS XE Software
- CVE-2019-12665Cisco IOS and IOS XE Software HTTP Client Information Disclosure VulnerabilityCisco IOS 12.2(15)B
- CVE-2019-12663Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2019-12661Cisco IOS XE Software Virtualization Manager CLI Command Injection VulnerabilityCisco IOS XE Software
- CVE-2019-12659Cisco IOS XE Software HTTP Server Denial of Service VulnerabilityCisco IOS XE Software 3.2.0JA
- CVE-2019-4571IBM Content Navigator 3.0CD is vulnerable to cross-site scripting.IBM Content Navigator
- CVE-2019-12649Cisco IOS XE Software Digital Signature Verification Bypass VulnerabilityCisco IOS XE Software 3.2.11aSG
- CVE-2019-16889Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/r
- CVE-2019-15941OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect a
- CVE-2019-14666GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature.
- CVE-2019-6656BIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in the log files.BIG-IP APM Edge Client
- CVE-2019-6655On versions 13.0.0-13.1.0.1, 12.1.0-12.1.4.1, 11.6.1-11.6.4, and 11.5.1-11.5.9, BIG-IP platforms where AVR, ASM, APM, PEM, AFM, and/or AAM iBIG-IP AVR, ASM, APM, PEM, AFM, and/or AAM
- CVE-2019-6654On versions 14.0.0-14.1.2, 13.0.0-13.1.3, 12.1.0-12.1.5, and 11.5.1-11.6.5, the BIG-IP system fails to perform Martian Address Filtering (AsBIG-IP
- CVE-2019-12205SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS.silverstripe/framework · silverstripe/admin
- CVE-2019-12203SilverStripe through 4.3.3 allows session fixation in the "change password" form.silverstripe/framework
- CVE-2019-12245SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile().silverstripe/framework · silverstripe/assets
- CVE-2019-12204In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.silverstripe/cms · silverstripe/framework
- CVE-2019-15069An unsafe authentication interface was discovered in Smart Battery A4Gigastone Smart Battery A4
- CVE-2019-15068A broken access control vulnerability discovered in Smart Battery A4Gigastone Smart Battery A4
- CVE-2019-15067An authentication bypass vulnerability discovered in Smart Battery A2-25DEGigastone Smart Battery A2-25DE
- CVE-2019-6653There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0 system.BIG-IQ
- CVE-2019-6652In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security (TLS).BIG-IQ
- CVE-2019-16887In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc.
- CVE-2019-6651In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager
- CVE-2015-9409The alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo-easymail-admin-options.php.
- CVE-2019-16882An issue was discovered in the string-interner crate before 0.7.1 for Rust.string-interner
- CVE-2019-16881An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust.portaudio-rs
- CVE-2019-10098In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by enApache HTTP Server
- CVE-2019-16880An issue was discovered in the linea crate through 0.9.4 for Rust.linea
- CVE-2019-16188HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations.
- CVE-2019-16701pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_php call containing sh
- CVE-2019-16194SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makcentreon/centreon
- CVE-2019-10424Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by usJenkins project Jenkins elOyente Plugin · com.technicolor:e…
- CVE-2019-10425Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by userJenkins project Jenkins Google Calendar Plugin · org.jenkin…
- CVE-2019-10426Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed Jenkins project Jenkins Gem Publisher Plugin · net.arangama…
- CVE-2019-10427Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuratJenkins project Jenkins Aqua MicroScanner Plugin · org.jenk…
- CVE-2019-10428Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins confiJenkins project Jenkins Aqua Security Scanner Plugin · org.…
- CVE-2019-10429Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed byJenkins project Jenkins GitLab Logo Plugin · org.jenkins-ci…
- CVE-2019-10430Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the JenkinJenkins project Jenkins NeuVector Vulnerability Scanner Plu…
- CVE-2019-10412Jenkins Inedo ProGet Plugin 1.2 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration forJenkins project Jenkins Inedo ProGet Plugin · com.inedo.pro…
- CVE-2019-10413Jenkins Data Theorem: CI/CD Plugin 1.3 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they cJenkins project Jenkins Data Theorem: CI/CD Plugin · com.da…
- CVE-2019-10414Jenkins Git Changelog Plugin 2.17 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could Jenkins project Jenkins Git Changelog Plugin · de.wellnerbo…
- CVE-2019-10415Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global configuration file on the Jenkins Jenkins project Jenkins Violation Comments to GitLab Plugin…
- CVE-2019-10416Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master whJenkins project Jenkins Violation Comments to GitLab Plugin…
- CVE-2019-10417Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke aJenkins project Jenkins Kubernetes :: Pipeline :: Kubernete…
- CVE-2019-10418Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke aJenkins project Jenkins Kubernetes :: Pipeline :: Arquillia…
- CVE-2019-10419Jenkins vFabric Application Director Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where theyJenkins project Jenkins vFabric Application Director Plugin…
- CVE-2019-10420Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by usJenkins project Jenkins Assembla Plugin · org.jenkins-ci.pl…
- CVE-2019-10421Jenkins Azure Event Grid Build Notifier Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can bJenkins project Jenkins Azure Event Grid Build Notifier Plu…
- CVE-2019-10422Jenkins Call Remote Job Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by userJenkins project Jenkins Call Remote Job Plugin · org.ukiuni…
- CVE-2019-10423Jenkins CodeScan Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by usJenkins project Jenkins CodeScan Plugin · com.villagechief.…
- CVE-2019-10401In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, rJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2019-10402In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a storeJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2019-10403Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a storedJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2019-10404Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a storedJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2019-10405Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attacJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2019-10406Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not restrict or filter values set as Jenkins URL in the global configuration, resultiJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2019-10407Jenkins Project Inheritance Plugin 2.0.0 and earlier displayed a list of environment variables passed to a build without masking sensitive vJenkins Project Inheritance Plugin · hudson.plugins:project…
- CVE-2019-10408A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project geneJenkins Project Inheritance Plugin · hudson.plugins:project…
- CVE-2019-10409A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to triggerJenkins Project Inheritance Plugin · hudson.plugins:project…
- CVE-2019-10410Jenkins Log Parser Plugin 2.0 and earlier did not escape an error message, resulting in a cross-site scripting vulnerability exploitable by Jenkins project Jenkins Log Parser Plugin · org.jenkins-ci.…
- CVE-2019-10411Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuratJenkins project Jenkins Inedo BuildMaster Plugin · com.ined…
- CVE-2019-13627It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.
- CVE-2019-16868emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traver
- CVE-2019-16867HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue
- CVE-2019-16884runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/roogithub.com/opencontainers/runc · github.com/opencontainers/…
- CVE-2019-16892In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can berubyzip