CVEs published September 26, 2019
68 CVEs were published on September 26, 2019: 0 critical, 4 high.
- Published
- 68
- Critical
- 0
- High
- 4
- Medium
- 3
- Low
- 0
- Unrated
- 61
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- Apache HTTP Server
- 3
- silverstripe/framework
- 3
- Apache Subversion
- 2
- Cloud Foundry UAA Release
- 2
- Netskope client
- 2
- DotNetNuke.Core
- 1
- Honeywell Performance IP Cameras · Honeywell Performance NV…
- 1
- IBM MQ
- 1
- IBM QRadar SIEM
- 1
- io.netty:netty-all · org.jboss.netty:netty +1
- 1
High 4
- CVE-2019-11279Privilege Escalation via Scope Manipulation in UAACloud Foundry UAA Release
- CVE-2019-11278Privilege Escalation via Blind SCIM Injection in UAACloud Foundry UAA Release
- CVE-2019-12091Netskope client command injections vulnerabilityNetskope client
- CVE-2019-14844A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending oMIT krb5
Medium, low and unrated 64
- CVE-2019-15891An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0.
- CVE-2019-15862An issue was discovered in CKFinder through 2.6.2.1.
- CVE-2019-12562Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into thDotNetNuke.Core
- CVE-2019-16667diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands.
- CVE-2019-16914An XSS issue was discovered in pfSense through 2.4.4-p3.
- CVE-2019-16915An issue was discovered in pfSense through 2.4.4-p3.
- CVE-2019-0203In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends Apache Subversion
- CVE-2018-11782In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed rApache Subversion
- CVE-2019-16524The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfan
- CVE-2019-16869Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leadsio.netty:netty-all · org.jboss.netty:netty +1
- CVE-2019-16755BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perfo
- CVE-2019-6161An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB (Storage Block) BMC Lenovo ThinkAgile CP-SB
- CVE-2019-6175System Update VulnerabilityLenovo System Update
- CVE-2019-10882Netskope client buffer overflow vulnerabilityNetskope client
- CVE-2019-4378IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is vIBM MQ
- CVE-2019-4262IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF).IBM QRadar SIEM
- CVE-2019-10082In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed,Apache HTTP Server
- CVE-2019-16409In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guesssymbiote/silverstripe-versionedfiles · silverstripe/framewo…
- CVE-2019-16894download.php in inoERP 4.15 allows SQL injection through insecure deserialization.
- CVE-2019-16532An HTTP Host header injection vulnerability exists in YzmCMS V5.3.
- CVE-2019-13523In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to Honeywell Performance IP Cameras · Honeywell Performance NV…
- CVE-2019-10097In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol,Apache HTTP Server
- CVE-2019-10092In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page.Apache HTTP Server
- CVE-2019-12617In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution.silverstripe/framework
- CVE-2019-14272In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.silverstripe/framework
- CVE-2019-14273In SilverStripe assets 4.0, there is broken access control on files.silverstripe/framework
- CVE-2019-16904TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an adminilsteampassnet/teampass
- CVE-2019-16903Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /..
- CVE-2015-9441The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php.
- CVE-2015-9442The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin.
- CVE-2015-9443The accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=
- CVE-2015-9444The altos-connect plugin 1.3.0 for WordPress has XSS via the wp-content/plugins/altos-connect/jquery-validate/demo/demo/captcha/index.php/ P
- CVE-2015-9445The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action
- CVE-2015-9446The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.
- CVE-2015-9447The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters.
- CVE-2015-9448The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.
- CVE-2015-9440The monetize plugin through 1.03 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=monetize-zones-new.
- CVE-2015-9439The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthis_social_widget p
- CVE-2019-16738In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.mediawiki/core
- CVE-2015-9438The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dw_show_widget id_base, widget_number, o
- CVE-2015-9437The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit
- CVE-2015-9436The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id paramete
- CVE-2015-9435The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.
- CVE-2015-9434The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=kwlogos&page=kwlogo
- CVE-2015-9433The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twit
- CVE-2015-9432The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?pag
- CVE-2015-9431The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_c
- CVE-2019-16899In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICIn
- CVE-2019-16900Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c.
- CVE-2019-16901Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from
- CVE-2015-9449The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php accou
- CVE-2015-9430The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.
- CVE-2015-9429The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mo
- CVE-2015-9428The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-busi
- CVE-2015-9427The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID o
- CVE-2015-9426The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window
- CVE-2015-9425The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=opanda-item&page=license
- CVE-2015-9424The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.ph
- CVE-2015-9423The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dia
- CVE-2015-9422The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields
- CVE-2015-9421The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id
- CVE-2015-9420The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter.
- CVE-2015-9419The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.
- CVE-2019-16910Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for b