CVEs published October 2, 2019
74 CVEs were published on October 2, 2019: 2 critical, 25 high.
- Published
- 74
- Critical
- 2
- High
- 25
- Medium
- 25
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Cisco Firepower Management Center
- 15
- Cisco Adaptive Security Appliance (ASA) Software
- 8
- Cisco Unified Communications Manager
- 6
- IBM Security Directory Server
- 5
- Cisco Firepower Threat Defense Software
- 3
- Cisco FireSIGHT System Software
- 2
- Cisco Prime Infrastructure
- 2
- CA Technologies, a Broadcom Company CA Network Flow Analysis
- 1
- Check Point Security Gateway
- 1
- Cisco Email Security Appliance
- 1
Critical 2
- CVE-2019-13658CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commanCA Technologies, a Broadcom Company CA Network Flow Analysis
- CVE-2019-13343Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download.
High 25
- CVE-2019-15256Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-12700Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service VulnerabilityCisco Firepower Management Center
- CVE-2019-12699Cisco FXOS Software and Firepower Threat Defense Software Command Injection VulnerabilitiesCisco Firepower Extensible Operating System
- CVE-2019-12690Cisco Firepower Management Center Command Injection VulnerabilityCisco Firepower Management Center
- CVE-2019-12689Cisco Firepower Management Center Remote Code Execution VulnerabilityCisco Firepower Management Center
- CVE-2019-12688Cisco Firepower Management Center Remote Code Execution VulnerabilityCisco Firepower Management Center
- CVE-2019-12687Cisco Firepower Management Center Remote Code Execution VulnerabilityCisco Firepower Management Center
- CVE-2019-12686Cisco Firepower Management Center SQL Injection VulnerabilitiesCisco Firepower Management Center
- CVE-2019-12685Cisco Firepower Management Center SQL Injection VulnerabilitiesCisco Firepower Management Center
- CVE-2019-12684Cisco Firepower Management Center SQL Injection VulnerabilitiesCisco Firepower Management Center
- CVE-2019-12683Cisco Firepower Management Center SQL Injection VulnerabilitiesCisco Firepower Management Center
- CVE-2019-12682Cisco Firepower Management Center SQL Injection VulnerabilitiesCisco Firepower Management Center
- CVE-2019-12681Cisco Firepower Management Center SQL Injection VulnerabilitiesCisco Firepower Management Center
- CVE-2019-12680Cisco Firepower Management Center SQL Injection VulnerabilitiesCisco Firepower Management Center
- CVE-2019-12679Cisco Firepower Management Center SQL Injection VulnerabilitiesCisco Firepower Management Center
- CVE-2019-12678Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Inspection Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-12677Cisco Adaptive Security Appliance Software SSL VPN Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-12676Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA Processing Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-12675Cisco Firepower Threat Defense Software Multi-instance Container Escape VulnerabilitiesCisco Firepower Threat Defense Software
- CVE-2019-12674Cisco Firepower Threat Defense Software Multi-instance Container Escape VulnerabilitiesCisco Firepower Threat Defense Software
- CVE-2019-12673Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-5031An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828.Foxit
- CVE-2019-4539IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the synIBM Security Directory Server
- CVE-2019-4538IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.IBM Security Directory Server
- CVE-2019-4520IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account creIBM Security Directory Server
Medium, low and unrated 47
- CVE-2019-11651Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 PatcMicro Focus Enterprise Developer and Enterprise Server
- CVE-2019-11929Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading Facebook HHVM
- CVE-2019-1915Multiple Cisco Unified Communications Products Cross-Site Request Forgery VulnerabilityCisco Unified Communications Manager
- CVE-2019-15272Cisco Unified Communications Manager Security Bypass VulnerabilityCisco Unified Communications Manager
- CVE-2019-15259Cisco Unified Contact Center Express HTTP Response Splitting VulnerabilityCisco Unified Contact Center Express
- CVE-2019-12716Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityCisco Unified Communications Manager
- CVE-2019-12715Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityCisco Unified Communications Manager
- CVE-2019-12714Cisco IC3000 Industrial Compute Gateway Denial of Service VulnerabilityCisco IC3000 Industrial Compute Gateway
- CVE-2019-12713Cisco Prime Infrastructure Cross-Site Scripting VulnerabilityCisco Prime Infrastructure
- CVE-2019-12712Cisco Prime Infrastructure Cross-Site Scripting VulnerabilityCisco Prime Infrastructure
- CVE-2019-12711Cisco Unified Communications Manager XML External Expansion VulnerabilityCisco Unified Communications Manager
- CVE-2019-12710Cisco Unified Communications Manager SQL Injection VulnerabilityCisco Unified Communications Manager
- CVE-2019-12707Multiple Cisco Unified Communications Products Cross-Site Scripting VulnerabilityCisco Unity Connection
- CVE-2019-12706Cisco Email Security Appliance Filter Bypass VulnerabilityCisco Email Security Appliance
- CVE-2019-12701Cisco Firepower Management Center Software File and Malware Policy Bypass VulnerabilityCisco Firepower Management Center
- CVE-2019-12698Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CPU Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-12697Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass VulnerabilitiesCisco FireSIGHT System Software
- CVE-2019-12696Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass VulnerabilitiesCisco FireSIGHT System Software
- CVE-2019-12695Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-12694Cisco Firepower Threat Defense Software Command Injection VulnerabilityCisco Firepower Threat Defense Software
- CVE-2019-12693Cisco Adaptive Security Appliance Software Secure Copy Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-12691Cisco Firepower Management Center Directory Traversal VulnerabilityCisco Firepower Management Center
- CVE-2019-12156Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity ver
- CVE-2019-12157In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
- CVE-2019-12736JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injec
- CVE-2019-12737UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials.
- CVE-2019-13957In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter.
- CVE-2019-14956JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project name
- CVE-2019-14958JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes.
- CVE-2019-14959JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.
- CVE-2019-15036An issue was discovered in JetBrains TeamCity 2018.2.4.
- CVE-2019-15037An issue was discovered in JetBrains TeamCity 2018.2.4.
- CVE-2019-15040JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.
- CVE-2019-16171In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.
- CVE-2019-10212A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security.RedHat undertow · io.undertow:undertow-core
- CVE-2019-12631Cisco Identity Services Engine Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2019-12630Cisco Security Manager Java Deserialization VulnerabilityCisco Security Manager
- CVE-2019-16407JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.
- CVE-2019-8462In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique coCheck Point Security Gateway
- CVE-2019-16116EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file.
- CVE-2019-13025Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation.
- CVE-2019-4549IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users.IBM Security Directory Server
- CVE-2019-4542IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting.IBM Security Directory Server
- CVE-2019-17091faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Facesorg.glassfish:javax.faces · org.glassfish:jakarta.faces
- CVE-2019-17080mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because
- CVE-2019-14454SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation.
- CVE-2019-13335SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF.