CVEs published October 4, 2019
31 CVEs were published on October 4, 2019: 0 critical, 8 high.
- Published
- 31
- Critical
- 0
- High
- 8
- Medium
- 4
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Foxit Reader
- 6
- Foxit PhantomPDF
- 3
- ArcSight Logger.
- 2
- IBM Security Key Lifecycle Manager
- 2
- Apache Hadoop · org.apache.hadoop:hadoop-main
- 1
- com.liferay.portal:release.portal.bom
- 1
- FON Wireless Limited FON2601E-SE, FON2601E-RE, FON2601E-FSW…
- 1
- IBM MQ
- 1
- pillow
- 1
High 8
- CVE-2019-13320This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723.Foxit Reader
- CVE-2019-6774This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828.Foxit Reader
- CVE-2019-6775This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723.Foxit Reader
- CVE-2019-6776This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723.Foxit PhantomPDF
- CVE-2019-13315This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723.Foxit Reader
- CVE-2019-13317This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723.Foxit PhantomPDF
- CVE-2019-13319This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723.Foxit Reader
- CVE-2019-13316This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723.Foxit PhantomPDF
Medium, low and unrated 23
- CVE-2019-17184Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker
- CVE-2019-17188An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4.
- CVE-2019-16865An issue was discovered in Pillow before 6.2.0.pillow
- CVE-2019-17183Foxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists.
- CVE-2019-17180Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modificati
- CVE-2019-11656Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0.ArcSight Logger.
- CVE-2019-11655Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later.ArcSight Logger.
- CVE-2019-171794.1.0, 4.1.1, 4.1.2, 4.1.2.3, 4.1.2.6, 4.1.2.7, 4.2.0, 4.2.1, 4.2.2, 5.0.0, 5.0.0.5, 5.0.0.6, 5.0.1, 5.0.1.1, 5.0.1.2, 5.0.1.3, 5.0.1.4, 5.0
- CVE-2019-6015FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behaveFON Wireless Limited FON2601E-SE, FON2601E-RE, FON2601E-FSW…
- CVE-2019-13318This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.5.0.20723.Foxit Reader
- CVE-2019-17177libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the
- CVE-2019-17178HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory lea
- CVE-2019-17175joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.
- CVE-2019-4564IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 is vulnerable to cross-site scripting.IBM Security Key Lifecycle Manager
- CVE-2019-4514IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users.IBM Security Key Lifecycle Manager
- CVE-2019-4227IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conducIBM MQ
- CVE-2018-11768In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupteApache Hadoop · org.apache.hadoop:hadoop-main
- CVE-2019-17133In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer
- CVE-2019-17132vBulletin through 5.5.4 mishandles custom avatars.
- CVE-2019-17131vBulletin before 5.5.4 allows clickjacking.
- CVE-2019-17130vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories.
- CVE-2019-17121REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values.
- CVE-2019-16891Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.com.liferay.portal:release.portal.bom