CVEs published October 16, 2019
242 CVEs were published on October 16, 2019: 3 critical, 20 high. 1 is now in CISA KEV.
- Published
- 242
- Critical
- 3
- High
- 20
- Medium
- 25
- Low
- 2
- Unrated
- 192
- Now in CISA KEV
- 1
- Fix available
- 30
Most affected products
- Oracle MySQL Server
- 28
- Oracle Java
- 19
- Cisco SPA112 2-Port Phone Adapter
- 18
- Oracle VM VirtualBox
- 10
- Oracle Database
- 9
- Oracle PeopleSoft Enterprise PT PeopleTools
- 8
- Oracle Outside In Technology
- 6
- Cisco TelePresence TC Software
- 5
- Oracle Hospitality Reporting and Analytics
- 5
- Oracle WebLogic Server
- 5
Critical 3
- CVE-2019-15260Cisco Aironet Access Points Unauthorized Access VulnerabilityCisco Aironet Access Point Software
- CVE-2019-2904Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces).Oracle Enterprise Repository · Oracle Rapid Planning
- CVE-2019-17626ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document reportlab
High 20
- CVE-2019-15265Cisco Aironet Access Points Bridge Protocol Data Unit Port Disable Denial of Service VulnerabilityCisco Aironet Access Point Software
- CVE-2019-15264Cisco Aironet Access Points and Catalyst 9100 Access Points CAPWAP Denial of Service VulnerabilityCisco Aironet Access Point Software
- CVE-2019-15262Cisco Wireless LAN Controller Secure Shell Denial of Service VulnerabilityCisco Wireless LAN Controller
- CVE-2019-15261Cisco Aironet Access Points Point-to-Point Tunneling Protocol Denial of Service VulnerabilityCisco Aironet Access Point Software
- CVE-2019-15252Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15251Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15250Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15249Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15248Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15247Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15246Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15245Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15244Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15243Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15242Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15241Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-15240Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution VulnerabilitiesCisco SPA112 2-Port Phone Adapter
- CVE-2019-12636Cisco Small Business Smart and Managed Switches Cross-Site Request Forgery VulnerabilityCisco Small Business 250 Series Smart Switches Software
- CVE-2019-3010Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver).Oracle Solaris Operating System
- CVE-2019-4031IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in tIBM Workload Scheduler Distributed
Medium, low and unrated 219
- CVE-2019-17611HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.
- CVE-2019-17610HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.
- CVE-2019-17609HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter.
- CVE-2019-17608HongCMS 3.0.0 has XSS via the install/index.php dbname parameter.
- CVE-2019-17607HongCMS 3.0.0 has XSS via the install/index.php servername parameter.
- CVE-2019-17664NSA Ghidra through 9.0.4 uses a potentially untrusted search path.
- CVE-2019-17665NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory.
- CVE-2019-13116The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserializatorg.mule.runtime:mule
- CVE-2019-16682The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injectsfroemken/url_redirect
- CVE-2019-16698The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with directmailteam/direct-mail
- CVE-2019-16699The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execsjbr/sr-freecap
- CVE-2019-16700The slub_events (aka SLUB: Event Registration) extension through 3.0.2 for TYPO3 allows uploading of arbitrary files to the webserver.slub/slub-events
- CVE-2019-15962Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write VulnerabilityCisco TelePresence TC Software
- CVE-2019-15282Cisco Identity Services Engine Information Disclosure VulnerabilityCisco Identity Services Engine Software
- CVE-2019-15281Cisco Identity Services Engine Stored Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2019-15280Cisco Firepower Management Center Software Stored Cross-Site Scripting VulnerabilityCisco Firepower Management Center
- CVE-2019-15277Cisco TelePresence Collaboration Endpoint Software Privilege Escalation VulnerabilityCisco TelePresence TC Software
- CVE-2019-15275Cisco TelePresence Collaboration Endpoint Software Privilege Escalation VulnerabilityCisco TelePresence TC Software
- CVE-2019-15274Cisco TelePresence Collaboration Endpoint Software Command Injection VulnerabilityCisco TelePresence TC Software
- CVE-2019-15273Cisco TelePresence Collaboration Endpoint Software Arbitrary File Overwrite VulnerabilitiesCisco TelePresence TC Software
- CVE-2019-15270Cisco Firepower Management Center Stored Cross-Site Scripting VulnerabilityCisco Firepower Management Center
- CVE-2019-15269Cisco Firepower Management Center Multiple Cross-Site Scripting VulnerabilitiesCisco Firepower Management Center
- CVE-2019-15268Cisco Firepower Management Center Multiple Cross-Site Scripting VulnerabilitiesCisco Firepower Management Center
- CVE-2019-15266Cisco Wireless LAN Controller Path Traversal VulnerabilityCisco Wireless LAN Controller
- CVE-2019-15258Cisco SPA100 Series Analog Telephone Adapters Web Management Interface Denial of Service VulnerabilityCisco SPA112 2-Port Phone Adapter
- CVE-2019-15257Cisco SPA100 Series Analog Telephone Adapters Running Configuration Information Disclosure VulnerabilityCisco SPA112 2-Port Phone Adapter
- CVE-2019-12718Cisco Small Business Smart and Managed Switches Cross-Site Scripting VulnerabilityCisco Small Business 200 Series Smart Switches
- CVE-2019-12708Cisco SPA100 Series Analog Telephone Adapters Administrative Credentials Information Disclosure VulnerabilityCisco SPA112 2-Port Phone Adapter
- CVE-2019-12705Cisco Expressway Series and TelePresence Video Communication Server Cross-Site Scripting VulnerabilityCisco TelePresence Video Communication Server
- CVE-2019-12704Cisco SPA100 Series Analog Telephone Adapters Web-Based Management Interface File Disclosure VulnerabilityCisco SPA112 2-Port Phone Adapter
- CVE-2019-12703Cisco SPA122 ATA with Router Devices DHCP Services Cross-Site Scripting VulnerabilityCisco SPA122 ATA with Router
- CVE-2019-12702Cisco SPA100 Series Analog Telephone Adapters Reflected Cross-Site Scripting VulnerabilityCisco SPA112 2-Port Phone Adapter
- CVE-2019-12638Cisco Identity Services Engine Stored Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2019-12637Cisco Identity Services Engine Multiple Stored Cross-Site Scripting VulnerabilitiesCisco Identity Services Engine Software
- CVE-2019-17512There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers.
- CVE-2019-17435A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for WindPalo Alto Networks GlobalProtect Agent for Windows
- CVE-2019-17436A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12Palo Alto Networks GlobalProtect Agent for Linux and OSX
- CVE-2019-17663D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection.
- CVE-2019-17576An issue was discovered in Dolibarr 10.0.2.dolibarr/dolibarr
- CVE-2019-3031Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-3008Vulnerability in the Oracle Solaris product of Oracle Systems (component: LDAP Library).Oracle Solaris Operating System
- CVE-2019-3009Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection).Oracle MySQL Server
- CVE-2019-3011Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API).Oracle MySQL Server
- CVE-2019-3012Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2019-3014Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2019-3015Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2019-3017Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-3018Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2019-3019Vulnerability in the Oracle Banking Digital Experience product of Oracle Financial Services Applications (component: Loan Calculator).Oracle Banking Digital Experience
- CVE-2019-3020Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2019-3021Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-3022Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content).Oracle Content Manager
- CVE-2019-3023Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2019-3024Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).Oracle Installed Base
- CVE-2019-3025Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications.Oracle Hospitality RES
- CVE-2019-3026Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-3027Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login Help).Oracle Application Object Library
- CVE-2019-3028Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-2988Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).Oracle Java
- CVE-2019-2989Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).Oracle Java
- CVE-2019-2990Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Order Tracker).Oracle iStore
- CVE-2019-2991Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2019-2992Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).Oracle Java
- CVE-2019-2993Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API).Oracle MySQL Server
- CVE-2019-2994Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2019-2995Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2019-2996Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment).Oracle Java
- CVE-2019-2997Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2019-2998Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2019-2999Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc).Oracle Java
- CVE-2019-3000Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2019-3001Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: eProcurement).Oracle PeopleSoft Enterprise SCM eProcurement
- CVE-2019-3002Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-3003Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2019-3004Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).Oracle MySQL Server
- CVE-2019-3005Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-2969Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs).Oracle MySQL Server
- CVE-2019-2970Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2019-2971Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2019-2972Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2019-2973Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).Oracle Java
- CVE-2019-2974Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2019-2975Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting).Oracle Java
- CVE-2019-2976Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2019-2977Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot).Oracle Java
- CVE-2019-2978Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).Oracle Java
- CVE-2019-2979Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Payments).Oracle FLEXCUBE Direct Banking
- CVE-2019-2980Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: eMail).Oracle FLEXCUBE Direct Banking
- CVE-2019-2981Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).Oracle Java
- CVE-2019-2982Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2019-2983Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).Oracle Java
- CVE-2019-2984Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-2985Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2019-2986Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter).Oracle GraalVM Enterprise Edition
- CVE-2019-2987Vulnerability in the Java SE product of Oracle Java SE (component: 2D).Oracle Java
- CVE-2019-2951Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: US Federal Specific).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2019-2952Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.Oracle Hospitality Reporting and Analytics
- CVE-2019-2953Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications (component: Web Service).Oracle Hospitality Cruise Dining Room Management
- CVE-2019-2954Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2019-2955Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2019-2956Vulnerability in the Core RDBMS (jackson-databind) component of Oracle Database Server.Oracle Database
- CVE-2019-2957Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2019-2958Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2019-2959Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Security Models).Oracle Hyperion Financial Reporting
- CVE-2019-2960Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2019-2961Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF services & legacy daemons).Oracle Solaris Operating System
- CVE-2019-2962Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).Oracle Java
- CVE-2019-2963Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2019-2964Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency).Oracle Java
- CVE-2019-2965Vulnerability in the Siebel Core - DB Deployment and Configuration product of Oracle Siebel CRM (component: Install - Configuration).Oracle Siebel Core - DB Deployment and Configuration
- CVE-2019-2966Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2019-2967Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2019-2968Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2019-2932Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2019-2933Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2019-2934Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.Oracle Hospitality Reporting and Analytics
- CVE-2019-2935Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI).Oracle Siebel UI Framework
- CVE-2019-2936Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.Oracle Hospitality Reporting and Analytics
- CVE-2019-2937Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.Oracle Hospitality Reporting and Analytics
- CVE-2019-2938Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2019-2939Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2019-2940Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2019-2941Vulnerability in the Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Modeling).Oracle Hyperion Profitability and Cost Management
- CVE-2019-2942Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).Oracle Advanced Outbound Telephony
- CVE-2019-2943Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio).Oracle Data Integrator
- CVE-2019-2944Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-2945Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).Oracle Java
- CVE-2019-2946Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Oracle MySQL Server
- CVE-2019-2947Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.Oracle Hospitality Reporting and Analytics
- CVE-2019-2948Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2019-2949Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos).Oracle Java
- CVE-2019-2950Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2019-2905Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation).Oracle Business Intelligence Enterprise Edition
- CVE-2019-2906Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: Mobile Service).Oracle BI Publisher
- CVE-2019-2907Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware (component: SOAP with Attachments API for Java).Oracle Web Services
- CVE-2019-2909Vulnerability in the Java VM component of Oracle Database Server.Oracle Database
- CVE-2019-2910Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2019-2911Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema).Oracle MySQL Server
- CVE-2019-2913Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2019-2914Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2019-2915Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2019-2920Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).Oracle MySQL Connectors
- CVE-2019-2922Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2019-2923Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2019-2924Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2019-2925Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist).Oracle Workflow
- CVE-2019-2926Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-2927Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and Security).Oracle Hyperion Data Relationship Management
- CVE-2019-2929Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2019-2930Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless).Oracle Field Service
- CVE-2019-2931Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2019-2872Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Point of Sale).Oracle Retail Xstore Point of Service
- CVE-2019-2883Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: SegmentOracle Retail Customer Management and Segmentation Foundati…
- CVE-2019-2884Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: SegmentOracle Retail Customer Management and Segmentation Foundati…
- CVE-2019-2886Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Services).Oracle Forms
- CVE-2019-2887Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2019-2888Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container).Oracle WebLogic Server
- CVE-2019-2889Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps).Oracle WebLogic Server
- CVE-2019-2890Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2019-2891Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2019-2894Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).Oracle Java
- CVE-2019-2895Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins).Oracle Enterprise Manager for Exadata
- CVE-2019-2897Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions).Oracle Enterprise Manager Base Platform
- CVE-2019-2898Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: BI Publisher Security).Oracle BI Publisher
- CVE-2019-2899Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM).Oracle Hyperion Financial Management
- CVE-2019-2900Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions).Oracle Business Intelligence Enterprise Edition
- CVE-2019-2901Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2019-2902Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2019-2903Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2019-2734Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2019-2765Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem).Oracle Solaris Operating System
- CVE-2018-2875Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2018-3300Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Internal Operations).Oracle Retail Xstore Office
- CVE-2019-2896Vulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications (component: Internal Operations).Oracle MICROS Relate CRM Software
- CVE-2019-17577An issue was discovered in Dolibarr 10.0.2.dolibarr/dolibarr
- CVE-2019-17578An issue was discovered in Dolibarr 10.0.2.dolibarr/dolibarr
- CVE-2019-17662ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server.
- CVE-2019-6474A packet containing a malformed DUID can cause the kea-dhcp6 server to terminateISC Kea
- CVE-2019-6473A packet containing a malformed DUID can cause the kea-dhcp6 server to terminateISC Kea
- CVE-2019-6472A packet containing a malformed DUID can cause the kea-dhcp6 server to terminateISC Kea
- CVE-2019-17660A cross-site scripting (XSS) vulnerability in admin/translate/translateheader_view.php in LimeSurvey 3.19.1 and earlier allows remote attack
- CVE-2019-11281RabbitMQ XSS attackPivotal RabbitMQ
- CVE-2019-6334HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potHP Color LaserJet CM4540 MFP,HP Color LaserJet Managed flow…
- CVE-2019-16522The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of sev
- CVE-2019-16521The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encodi
- CVE-2019-16523The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and inserti
- CVE-2019-16520The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of
- CVE-2019-10456A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an aJenkins project Jenkins Oracle Cloud Infrastructure Compute…
- CVE-2019-10457A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with Overall/Read permission to coJenkins project Jenkins Oracle Cloud Infrastructure Compute…
- CVE-2019-10458Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers ablJenkins project Jenkins Puppet Enterprise Pipeline · org.je…
- CVE-2019-10454A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attackerJenkins project Jenkins Rundeck Plugin · org.jenkins-ci.plu…
- CVE-2019-10455A missing permission check in Jenkins Rundeck Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL uJenkins project Jenkins Rundeck Plugin · org.jenkins-ci.plu…
- CVE-2019-10453Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by useJenkins project Jenkins Delphix Plugin · org.jenkins-ci.plu…
- CVE-2019-10450Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they canJenkins project Jenkins ElasticBox CI Plugin · com.elasticb…
- CVE-2019-10451Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewJenkins project Jenkins SOASTA CloudTest Plugin · com.soast…
- CVE-2019-10452Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed bJenkins project Jenkins View26 Test-Reporting Plugin · org.…
- CVE-2019-10449Jenkins Fortify on Demand Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by usJenkins project Jenkins Fortify on Demand Plugin · org.jenk…
- CVE-2019-10447Jenkins Sofy.AI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with EJenkins project Jenkins Sofy.AI Plugin · io.jenkins.plugins…
- CVE-2019-10448Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by usJenkins project Jenkins Extensive Testing Plugin · jenkins.…
- CVE-2019-10445A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obJenkins project Jenkins Google Kubernetes Engine Plugin · o…
- CVE-2019-10446Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.Jenkins project Jenkins Cadence vManager Plugin · org.jenki…
- CVE-2019-10442A missing permission check in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers with Overall/Read permission to connect to an attaJenkins project Jenkins iceScrum Plugin · org.jenkins-ci.pl…
- CVE-2019-10443Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be vJenkins project Jenkins iceScrum Plugin · org.jenkins-ci.pl…
- CVE-2019-10444Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM.Jenkins project Jenkins Bumblebee HP ALM Plugin · org.jenki…
- CVE-2019-10440Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins project Jenkins NeoLoad Plugin · org.jenkins-ci.plu…
- CVE-2019-10441A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specifieJenkins project Jenkins iceScrum Plugin · org.jenkins-ci.pl…
- CVE-2019-10438A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission tJenkins project Jenkins CRX Content Package Deployer Plugin…
- CVE-2019-10439A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods alJenkins project Jenkins CRX Content Package Deployer Plugin…
- CVE-2019-10436An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs andJenkins project Jenkins Google OAuth Credentials Plugin · o…
- CVE-2019-10437A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to Jenkins project Jenkins CRX Content Package Deployer Plugin…
- CVE-2019-15893Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution.
- CVE-2019-17629CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "file manager > upload images" screen.
- CVE-2019-17630CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "News > Add Article" screen.
- CVE-2019-17627The Yale Bluetooth Key application for mobile devices allows unauthorized unlock actions by sniffing Bluetooth Low Energy (BLE) traffic duri
- CVE-2019-17625There is a stored XSS in Rambox 0.6.9 that can lead to code execution.Rambox
- CVE-2019-17624"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap.
- CVE-2016-11014NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.
- CVE-2016-11015NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL para
- CVE-2016-11016NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS.