CVEs published September 30, 2019
62 CVEs were published on September 30, 2019: 0 critical, 1 high.
- Published
- 62
- Critical
- 0
- High
- 1
- Medium
- 13
- Low
- 1
- Unrated
- 47
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 11
- IBM WebSphere eXtreme Scale
- 4
- Dell RSA BSAFE Crypto-C Micro Edition · Dell RSA BSAFE MES
- 3
- Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- 3
- Dell RSA BSAFE MES
- 2
- IBM Sterling File Gateway
- 2
- IBM WebSphere Application Server
- 2
- Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- 2
- Dell RSA BSAFE Crypto-C Micro Edition · Dell RSA BSAFE M… +1
- 1
- phpbb/phpbb
- 1
High 1
Medium, low and unrated 61
- CVE-2019-3733RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Dell RSA BSAFE Crypto-C Micro Edition · Dell RSA BSAFE MES
- CVE-2019-3732RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition SuiteDell RSA BSAFE Crypto-C Micro Edition · Dell RSA BSAFE MES
- CVE-2019-3731RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Dell RSA BSAFE Crypto-C Micro Edition · Dell RSA BSAFE MES
- CVE-2019-3730RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information EDell RSA BSAFE MES
- CVE-2019-3729RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are vulnerable to a Heap-based Buffer Overflow vulnerDell RSA BSAFE MES
- CVE-2019-16760Cargo prior to Rust 1.26.0 may download the wrong dependencyrust cargo · cargo
- CVE-2019-13124Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Un
- CVE-2019-13123Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Un
- CVE-2019-17051Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demon
- CVE-2019-17050An issue was discovered in the Voyager package through 1.2.7 for Laravel.
- CVE-2019-16276Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.stdlib
- CVE-2019-17049NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user account.
- CVE-2019-13467Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable t
- CVE-2019-13466Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control.
- CVE-2019-15810Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL parameter.
- CVE-2019-10489Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10492Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 21Qualcomm Snapdragon Auto, Snapdragon Mobile, Snapdragon Wea…
- CVE-2019-10497Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous oneQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2019-10498Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon CoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10499Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access.Qualcomm Snapdragon Mobile, Snapdragon Voice & Music, Snapd…
- CVE-2019-10501Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, SnapdragonQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10506While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space whQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10507Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer EleQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10508Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer ElectronicQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10509Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivityQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10510BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto,Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2019-10538Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10539Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon ComQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10540Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2252Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2284Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOTQualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…
- CVE-2019-2294Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge inQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2333Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2341Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-16684An issue was discovered in the image-manager in Xoops 2.5.10.
- CVE-2019-4423IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system.IBM Sterling File Gateway
- CVE-2019-4305IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cIBM WebSphere Application Server
- CVE-2019-4304IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validatiIBM WebSphere Application Server
- CVE-2019-4280IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks agaIBM Sterling File Gateway
- CVE-2019-4115IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting.IBM WebSphere eXtreme Scale
- CVE-2019-4112IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system.IBM WebSphere eXtreme Scale
- CVE-2019-4109IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim.IBM WebSphere eXtreme Scale
- CVE-2019-4106IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting.IBM WebSphere eXtreme Scale
- CVE-2019-16683An issue was discovered in the image-manager in Xoops 2.5.10.
- CVE-2019-16932A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.
- CVE-2019-17046Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.
- CVE-2019-17045Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.
- CVE-2019-17040contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
- CVE-2019-16997In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=lan
- CVE-2019-16996In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_
- CVE-2017-18636CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.
- CVE-2019-16999CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI.
- CVE-2019-16745eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.
- CVE-2019-16744eBrigade before 5.0 has evenements.php cid SQL Injection.
- CVE-2019-14752SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS.
- CVE-2019-16414A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's clear
- CVE-2019-16743eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.
- CVE-2019-16995In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, whi
- CVE-2019-16994In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_t
- CVE-2019-16676Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string issimple_form
- CVE-2019-16993In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Cphpbb/phpbb