CVEs published October 6, 2019
15 CVEs were published on October 6, 2019: 1 critical, 0 high.
- Published
- 15
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 1
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- com.fasterxml.jackson.core:jackson-databind
- 1
Critical 1
Medium, low and unrated 14
- CVE-2019-17269Intellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field.
- CVE-2019-17266libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does no
- CVE-2019-17264In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read b
- CVE-2019-17263In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a heap-based buffer over-r
- CVE-2019-17240bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-
- CVE-2019-17226CMS Made Simple (CMSMS) 2.2.11 allows XSS via the Site Admin > Module Manager > Search Term field.
- CVE-2019-17225Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.
- CVE-2019-17215An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05.
- CVE-2019-17216An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05.
- CVE-2019-17217An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05.
- CVE-2019-17218An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05.
- CVE-2019-17219An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05.
- CVE-2019-17213The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header.
- CVE-2019-17214The WebARX plugin 1.3.0 for WordPress allows firewall bypass by appending &cc=1 to a URI.