CVEs published October 10, 2019
131 CVEs were published on October 10, 2019: 0 critical, 4 high. 2 are now in CISA KEV.
- Published
- 131
- Critical
- 0
- High
- 4
- Medium
- 0
- Low
- 1
- Unrated
- 126
- Now in CISA KEV
- 2
- Fix available
- 9
Most affected products
- Microsoft Windows
- 33
- Cobham plc Explorer
- 6
- Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit… +4
- 4
- Microsoft Windows Server · Microsoft Windows
- 4
- Microsoft Internet Explorer
- 3
- Microsoft SharePoint Foundation · Microsoft SharePoint Ente…
- 3
- Microsoft SQL Server Management Studio
- 2
- craftcms/cms
- 1
- encore/laravel-admin
- 1
- ESXi, Workstation, Fusion, VMRC and Horizon Client
- 1
High 4
- CVE-2019-10923An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRSiemens Development/Evaluation Kits for PROFINET IO: DK… +64
- CVE-2019-1322An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Microsoft Windows
- CVE-2019-1315An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error ReportMicrosoft Windows
- CVE-2019-10936Affected devices improperly handle large amounts of specially crafted UDP packets.Siemens Development/Evaluation Kits for PROFINET IO: DK… +75
Medium, low and unrated 127
- CVE-2019-17497Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE
- CVE-2019-17496Craft CMS before 3.3.8 has stored XSS via a name field.craftcms/cms
- CVE-2019-17495A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPOswagger-ui · org.webjars:swagger-ui +2
- CVE-2019-17488b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.
- CVE-2019-17489Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update
- CVE-2019-17490app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by
- CVE-2019-17491Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/upd
- CVE-2019-17493Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/up
- CVE-2019-17494laravel-bjyblog 6.1.1 has XSS via a crafted URL.
- CVE-2019-9534The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware imageCobham plc Explorer
- CVE-2019-9533The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08Cobham plc Explorer
- CVE-2019-9532The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartextCobham plc Explorer
- CVE-2019-9531The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to a port that can run AT commandsCobham plc Explorer
- CVE-2019-9530The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all filesCobham plc Explorer
- CVE-2019-9529The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by defaultCobham plc Explorer
- CVE-2019-17386The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.
- CVE-2019-11527An issue was discovered in Softing uaGate SI 1.60.01.
- CVE-2019-11528An issue was discovered in Softing uaGate SI 1.60.01.
- CVE-2019-15051An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225.
- CVE-2019-11526An issue was discovered in Softing uaGate SI 1.60.01.
- CVE-2019-14810A vulnerability has been found in the implementation of the Label Distribution Protocol (LDP) protocol in EOS.
- CVE-2019-17455Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write op
- CVE-2019-17452Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::Inspe
- CVE-2019-17453Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::WriteFie
- CVE-2019-17454Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descriptor::GetTag in Core/Ap4Descriptor.h, related to AP4_StsdAtom::GetSampleDescripti
- CVE-2019-5535VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets.VMware Workstation and Fusion
- CVE-2019-5527ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device.ESXi, Workstation, Fusion, VMRC and Horizon Client
- CVE-2015-9480The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.
- CVE-2019-17450find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows rem
- CVE-2015-9479The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery
- CVE-2019-17451An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32.
- CVE-2015-9478prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS.
- CVE-2015-9477The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.
- CVE-2015-9476The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.
- CVE-2015-9475The Pont theme 1.5 for WordPress has insufficient restrictions on option updates.
- CVE-2015-9474The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.
- CVE-2015-9473The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter.
- CVE-2015-9472The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header.
- CVE-2015-9471The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload.
- CVE-2015-9463The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/down
- CVE-2015-9470The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter.
- CVE-2015-9469The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id.
- CVE-2015-9468The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.
- CVE-2015-9467The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.
- CVE-2015-9466The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, H
- CVE-2015-9465The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id paramete
- CVE-2015-9464The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/co
- CVE-2019-17449Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack.
- CVE-2015-9462The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter.
- CVE-2015-9461The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter
- CVE-2015-9460The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
- CVE-2015-9459The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter.
- CVE-2015-9458The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploita
- CVE-2015-9457The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.
- CVE-2019-17320NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying fiNetSarang XFTP
- CVE-2019-4265IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive iIBM Maximo Anywhere
- CVE-2019-13921A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1).Siemens AG SIMATIC WinAC RTX (F)
- CVE-2019-13929A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3).Siemens AG SIMATIC IT UADM
- CVE-2019-1345An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMicrosoft Windows Server · Microsoft Windows
- CVE-2019-1346A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Microsoft Windows
- CVE-2019-1347A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Microsoft Windows
- CVE-2019-1356An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft EMicrosoft Edge (EdgeHTML-based) on Windows Server · Microso…
- CVE-2019-1357A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability'.Microsoft Internet Explorer · Microsoft Edge (EdgeHTML-base…
- CVE-2019-1358A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2019-1359A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2019-1361An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft GraphiMicrosoft Windows
- CVE-2019-1362An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2019-1363An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowiMicrosoft Windows
- CVE-2019-1364An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2019-1365An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to itMicrosoft Windows
- CVE-2019-1366A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'CMicrosoft Edge (EdgeHTML-based) on Windows 10 for 32-bit… +4
- CVE-2019-1368A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'Windows Secure Boot SMicrosoft Windows
- CVE-2019-1369An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open EnclavMicrosoft Open Enclave SDK
- CVE-2019-1371A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory CorMicrosoft Internet Explorer
- CVE-2019-1372An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to Microsoft Azure App Service on Azure Stack
- CVE-2019-1375A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web reqMicrosoft Dynamics
- CVE-2019-1376An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, akaMicrosoft SQL Server Management Studio
- CVE-2019-1378An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attaMicrosoft Windows Update Assistant
- CVE-2019-1318A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft WindMicrosoft Windows
- CVE-2019-1319An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error RepoMicrosoft Windows
- CVE-2019-1320An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Microsoft Windows
- CVE-2019-1321An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List (DACL), akaMicrosoft Windows
- CVE-2019-1323An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'MicrMicrosoft Windows
- CVE-2019-1325An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the operating system impropMicrosoft Windows
- CVE-2019-1326A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sendsMicrosoft Windows
- CVE-2019-1327A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel · Microsoft Office
- CVE-2019-1328A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SMicrosoft SharePoint Foundation · Microsoft SharePoint Ente…
- CVE-2019-1329An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request tMicrosoft SharePoint Foundation · Microsoft SharePoint Ente…
- CVE-2019-1330An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.Microsoft SharePoint Foundation · Microsoft SharePoint E… +1
- CVE-2019-1331A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel · Microsoft Office +2
- CVE-2019-1333A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote DeMicrosoft Windows
- CVE-2019-1334An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMicrosoft Windows
- CVE-2019-1335A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'CMicrosoft Edge (EdgeHTML-based) on Windows 10 for 32-bit… +4
- CVE-2019-1336An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'MicrMicrosoft Windows
- CVE-2019-1337An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update ClMicrosoft Windows
- CVE-2019-1338A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMicrosoft Windows
- CVE-2019-1339An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error ReportMicrosoft Windows
- CVE-2019-1340An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.To exploitMicrosoft Windows
- CVE-2019-1341An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka 'Microsoft Windows
- CVE-2019-1342An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error RMicrosoft Windows
- CVE-2019-1343A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Microsoft Windows Server · Microsoft Windows
- CVE-2019-1344An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows CodMicrosoft Windows
- CVE-2019-0608A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability'Microsoft Internet Explorer · Microsoft Edge (EdgeHTML-b… +3
- CVE-2019-1060A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote CodeMicrosoft Windows Server · Microsoft Windows
- CVE-2019-1070A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Foundation · Microsoft SharePoint Ente…
- CVE-2019-1166A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (MessageMicrosoft Windows
- CVE-2019-1230An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validateMicrosoft Windows
- CVE-2019-1238A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer
- CVE-2019-1239A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer
- CVE-2019-1307A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'CMicrosoft Edge (EdgeHTML-based) on Windows 10 for 32-bit… +4
- CVE-2019-1308A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'CMicrosoft Edge (EdgeHTML-based) on Windows 10 for 32-bit… +4
- CVE-2019-1311A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API RemMicrosoft Windows Server · Microsoft Windows
- CVE-2019-1313An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, akaMicrosoft SQL Server Management Studio
- CVE-2019-1314A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the lockeMicrosoft Windows 10 Mobile
- CVE-2019-1316An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft WindowMicrosoft Windows
- CVE-2019-1317A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'Microsoft Windows
- CVE-2019-17434LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen.
- CVE-2019-17433z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.encore/laravel-admin
- CVE-2019-17431An issue was discovered in fastadmin 1.0.0.20190705_beta.
- CVE-2019-17432An issue was discovered in fastadmin 1.0.0.20190705_beta.
- CVE-2019-17072The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query
- CVE-2019-17071The client-dash (aka Client Dash) plugin 2.1.4 for WordPress allows XSS.
- CVE-2019-17070The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer.
- CVE-2019-17429Adhouma CMS through 2019-10-09 has SQL Injection via the post.php p_id parameter.
- CVE-2019-17430EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.
- CVE-2019-17427In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.
- CVE-2019-17426Automattic Mongoose through 5.7.4 allows attackers to bypass access control (in some applications) because any query object with a _bsontypemongoose