# CVEs published 2019-10-16

242 CVEs were published on October 16, 2019: 3 critical, 20 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-17611](https://cve.now/CVE-2019-17611.md): HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter. (no CVSS)
- [CVE-2019-17610](https://cve.now/CVE-2019-17610.md): HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter. (no CVSS)
- [CVE-2019-17609](https://cve.now/CVE-2019-17609.md): HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter. (no CVSS)
- [CVE-2019-17608](https://cve.now/CVE-2019-17608.md): HongCMS 3.0.0 has XSS via the install/index.php dbname parameter. (no CVSS)
- [CVE-2019-17607](https://cve.now/CVE-2019-17607.md): HongCMS 3.0.0 has XSS via the install/index.php servername parameter. (no CVSS)
- [CVE-2019-17664](https://cve.now/CVE-2019-17664.md): NSA Ghidra through 9.0.4 uses a potentially untrusted search path. (no CVSS)
- [CVE-2019-17665](https://cve.now/CVE-2019-17665.md): NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory. (no CVSS)
- [CVE-2019-13116](https://cve.now/CVE-2019-13116.md): The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserializat (no CVSS, org.mule.runtime:mule)
- [CVE-2019-16682](https://cve.now/CVE-2019-16682.md): The url\_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Inject (no CVSS, sfroemken/url\_redirect)
- [CVE-2019-16698](https://cve.now/CVE-2019-16698.md): The direct\_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with (no CVSS, directmailteam/direct-mail)
- [CVE-2019-16699](https://cve.now/CVE-2019-16699.md): The sr\_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows exec (no CVSS, sjbr/sr-freecap)
- [CVE-2019-16700](https://cve.now/CVE-2019-16700.md): The slub\_events (aka SLUB: Event Registration) extension through 3.0.2 for TYPO3 allows uploading of arbitrary files to the webserver. (no CVSS, slub/slub-events)
- [CVE-2019-15962](https://cve.now/CVE-2019-15962.md): Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability (CVSS 4.4, Cisco TelePresence TC Software)
- [CVE-2019-15282](https://cve.now/CVE-2019-15282.md): Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 4.3, Cisco Identity Services Engine Software)
- [CVE-2019-15281](https://cve.now/CVE-2019-15281.md): Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Identity Services Engine Software)
- [CVE-2019-15280](https://cve.now/CVE-2019-15280.md): Cisco Firepower Management Center Software Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Firepower Management Center)
- [CVE-2019-15277](https://cve.now/CVE-2019-15277.md): Cisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability (CVSS 6.4, Cisco TelePresence TC Software)
- [CVE-2019-15275](https://cve.now/CVE-2019-15275.md): Cisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability (CVSS 6.7, Cisco TelePresence TC Software)
- [CVE-2019-15274](https://cve.now/CVE-2019-15274.md): Cisco TelePresence Collaboration Endpoint Software Command Injection Vulnerability (CVSS 6.4, Cisco TelePresence TC Software)
- [CVE-2019-15273](https://cve.now/CVE-2019-15273.md): Cisco TelePresence Collaboration Endpoint Software Arbitrary File Overwrite Vulnerabilities (CVSS 6.0, Cisco TelePresence TC Software)
- [CVE-2019-15270](https://cve.now/CVE-2019-15270.md): Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Firepower Management Center)
- [CVE-2019-15269](https://cve.now/CVE-2019-15269.md): Cisco Firepower Management Center Multiple Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Firepower Management Center)
- [CVE-2019-15268](https://cve.now/CVE-2019-15268.md): Cisco Firepower Management Center Multiple Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Firepower Management Center)
- [CVE-2019-15266](https://cve.now/CVE-2019-15266.md): Cisco Wireless LAN Controller Path Traversal Vulnerability (CVSS 4.4, Cisco Wireless LAN Controller)
- [CVE-2019-15265](https://cve.now/CVE-2019-15265.md): Cisco Aironet Access Points Bridge Protocol Data Unit Port Disable Denial of Service Vulnerability (CVSS 7.4, Cisco Aironet Access Point Software)
- [CVE-2019-15264](https://cve.now/CVE-2019-15264.md): Cisco Aironet Access Points and Catalyst 9100 Access Points CAPWAP Denial of Service Vulnerability (CVSS 7.4, Cisco Aironet Access Point Software)
- [CVE-2019-15262](https://cve.now/CVE-2019-15262.md): Cisco Wireless LAN Controller Secure Shell Denial of Service Vulnerability (CVSS 8.6, Cisco Wireless LAN Controller)
- [CVE-2019-15261](https://cve.now/CVE-2019-15261.md): Cisco Aironet Access Points Point-to-Point Tunneling Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco Aironet Access Point Software)
- [CVE-2019-15260](https://cve.now/CVE-2019-15260.md): Cisco Aironet Access Points Unauthorized Access Vulnerability (CVSS 9.8, Cisco Aironet Access Point Software)
- [CVE-2019-15258](https://cve.now/CVE-2019-15258.md): Cisco SPA100 Series Analog Telephone Adapters Web Management Interface Denial of Service Vulnerability (CVSS 6.5, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15257](https://cve.now/CVE-2019-15257.md): Cisco SPA100 Series Analog Telephone Adapters Running Configuration Information Disclosure Vulnerability (CVSS 6.5, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15252](https://cve.now/CVE-2019-15252.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15251](https://cve.now/CVE-2019-15251.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15250](https://cve.now/CVE-2019-15250.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15249](https://cve.now/CVE-2019-15249.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15248](https://cve.now/CVE-2019-15248.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15247](https://cve.now/CVE-2019-15247.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15246](https://cve.now/CVE-2019-15246.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15245](https://cve.now/CVE-2019-15245.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15244](https://cve.now/CVE-2019-15244.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15243](https://cve.now/CVE-2019-15243.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15242](https://cve.now/CVE-2019-15242.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15241](https://cve.now/CVE-2019-15241.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-15240](https://cve.now/CVE-2019-15240.md): Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerabilities (CVSS 8.0, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-12718](https://cve.now/CVE-2019-12718.md): Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Small Business 200 Series Smart Switches)
- [CVE-2019-12708](https://cve.now/CVE-2019-12708.md): Cisco SPA100 Series Analog Telephone Adapters Administrative Credentials Information Disclosure Vulnerability (CVSS 6.5, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-12705](https://cve.now/CVE-2019-12705.md): Cisco Expressway Series and TelePresence Video Communication Server Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco TelePresence Video Communication Server)
- [CVE-2019-12704](https://cve.now/CVE-2019-12704.md): Cisco SPA100 Series Analog Telephone Adapters Web-Based Management Interface File Disclosure Vulnerability (CVSS 6.5, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-12703](https://cve.now/CVE-2019-12703.md): Cisco SPA122 ATA with Router Devices DHCP Services Cross-Site Scripting Vulnerability (CVSS 5.2, Cisco SPA122 ATA with Router)
- [CVE-2019-12702](https://cve.now/CVE-2019-12702.md): Cisco SPA100 Series Analog Telephone Adapters Reflected Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco SPA112 2-Port Phone Adapter)
- [CVE-2019-12638](https://cve.now/CVE-2019-12638.md): Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Identity Services Engine Software)
- [CVE-2019-12637](https://cve.now/CVE-2019-12637.md): Cisco Identity Services Engine Multiple Stored Cross-Site Scripting Vulnerabilities (CVSS 5.4, Cisco Identity Services Engine Software)
- [CVE-2019-12636](https://cve.now/CVE-2019-12636.md): Cisco Small Business Smart and Managed Switches Cross-Site Request Forgery Vulnerability (CVSS 8.1, Cisco Small Business 250 Series Smart Switches Software)
- [CVE-2019-17512](https://cve.now/CVE-2019-17512.md): There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. (no CVSS)
- [CVE-2019-17435](https://cve.now/CVE-2019-17435.md): A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Wind (no CVSS, Palo Alto Networks GlobalProtect Agent for Windows)
- [CVE-2019-17436](https://cve.now/CVE-2019-17436.md): A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 (no CVSS, Palo Alto Networks GlobalProtect Agent for Linux and OSX)
- [CVE-2019-17663](https://cve.now/CVE-2019-17663.md): D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection. (no CVSS)
- [CVE-2019-17576](https://cve.now/CVE-2019-17576.md): An issue was discovered in Dolibarr 10.0.2. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-3031](https://cve.now/CVE-2019-3031.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-3008](https://cve.now/CVE-2019-3008.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: LDAP Library). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-3009](https://cve.now/CVE-2019-3009.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection). (no CVSS, Oracle MySQL Server)
- [CVE-2019-3010](https://cve.now/CVE-2019-3010.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). (CVSS 8.8, KEV, Oracle Solaris Operating System)
- [CVE-2019-3011](https://cve.now/CVE-2019-3011.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). (no CVSS, Oracle MySQL Server)
- [CVE-2019-3012](https://cve.now/CVE-2019-3012.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). (no CVSS, Oracle Business Intelligence Enterprise Edition)
- [CVE-2019-3014](https://cve.now/CVE-2019-3014.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-3015](https://cve.now/CVE-2019-3015.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-3017](https://cve.now/CVE-2019-3017.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-3018](https://cve.now/CVE-2019-3018.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-3019](https://cve.now/CVE-2019-3019.md): Vulnerability in the Oracle Banking Digital Experience product of Oracle Financial Services Applications (component: Loan Calculator). (no CVSS, Oracle Banking Digital Experience)
- [CVE-2019-3020](https://cve.now/CVE-2019-3020.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2019-3021](https://cve.now/CVE-2019-3021.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-3022](https://cve.now/CVE-2019-3022.md): Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content). (no CVSS, Oracle Content Manager)
- [CVE-2019-3023](https://cve.now/CVE-2019-3023.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-3024](https://cve.now/CVE-2019-3024.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). (no CVSS, Oracle Installed Base)
- [CVE-2019-3025](https://cve.now/CVE-2019-3025.md): Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality RES)
- [CVE-2019-3026](https://cve.now/CVE-2019-3026.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-3027](https://cve.now/CVE-2019-3027.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login Help). (no CVSS, Oracle Application Object Library)
- [CVE-2019-3028](https://cve.now/CVE-2019-3028.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2988](https://cve.now/CVE-2019-2988.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). (no CVSS, Oracle Java)
- [CVE-2019-2989](https://cve.now/CVE-2019-2989.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). (no CVSS, Oracle Java)
- [CVE-2019-2990](https://cve.now/CVE-2019-2990.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Order Tracker). (no CVSS, Oracle iStore)
- [CVE-2019-2991](https://cve.now/CVE-2019-2991.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2992](https://cve.now/CVE-2019-2992.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). (no CVSS, Oracle Java)
- [CVE-2019-2993](https://cve.now/CVE-2019-2993.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2994](https://cve.now/CVE-2019-2994.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2019-2995](https://cve.now/CVE-2019-2995.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2019-2996](https://cve.now/CVE-2019-2996.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). (no CVSS, Oracle Java)
- [CVE-2019-2997](https://cve.now/CVE-2019-2997.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2998](https://cve.now/CVE-2019-2998.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2999](https://cve.now/CVE-2019-2999.md): Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). (no CVSS, Oracle Java)
- [CVE-2019-3000](https://cve.now/CVE-2019-3000.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2019-3001](https://cve.now/CVE-2019-3001.md): Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: eProcurement). (no CVSS, Oracle PeopleSoft Enterprise SCM eProcurement)
- [CVE-2019-3002](https://cve.now/CVE-2019-3002.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-3003](https://cve.now/CVE-2019-3003.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-3004](https://cve.now/CVE-2019-3004.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (no CVSS, Oracle MySQL Server)
- [CVE-2019-3005](https://cve.now/CVE-2019-3005.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2969](https://cve.now/CVE-2019-2969.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2970](https://cve.now/CVE-2019-2970.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2971](https://cve.now/CVE-2019-2971.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2972](https://cve.now/CVE-2019-2972.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2973](https://cve.now/CVE-2019-2973.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). (no CVSS, Oracle Java)
- [CVE-2019-2974](https://cve.now/CVE-2019-2974.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2975](https://cve.now/CVE-2019-2975.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). (no CVSS, Oracle Java)
- [CVE-2019-2976](https://cve.now/CVE-2019-2976.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2019-2977](https://cve.now/CVE-2019-2977.md): Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). (no CVSS, Oracle Java)
- [CVE-2019-2978](https://cve.now/CVE-2019-2978.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). (no CVSS, Oracle Java)
- [CVE-2019-2979](https://cve.now/CVE-2019-2979.md): Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Payments). (no CVSS, Oracle FLEXCUBE Direct Banking)
- [CVE-2019-2980](https://cve.now/CVE-2019-2980.md): Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: eMail). (no CVSS, Oracle FLEXCUBE Direct Banking)
- [CVE-2019-2981](https://cve.now/CVE-2019-2981.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). (no CVSS, Oracle Java)
- [CVE-2019-2982](https://cve.now/CVE-2019-2982.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2983](https://cve.now/CVE-2019-2983.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (no CVSS, Oracle Java)
- [CVE-2019-2984](https://cve.now/CVE-2019-2984.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2985](https://cve.now/CVE-2019-2985.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2986](https://cve.now/CVE-2019-2986.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). (no CVSS, Oracle GraalVM Enterprise Edition)
- [CVE-2019-2987](https://cve.now/CVE-2019-2987.md): Vulnerability in the Java SE product of Oracle Java SE (component: 2D). (no CVSS, Oracle Java)
- [CVE-2019-2951](https://cve.now/CVE-2019-2951.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: US Federal Specific). (no CVSS, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2019-2952](https://cve.now/CVE-2019-2952.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2019-2953](https://cve.now/CVE-2019-2953.md): Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications (component: Web Service). (no CVSS, Oracle Hospitality Cruise Dining Room Management)
- [CVE-2019-2954](https://cve.now/CVE-2019-2954.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2955](https://cve.now/CVE-2019-2955.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2956](https://cve.now/CVE-2019-2956.md): Vulnerability in the Core RDBMS (jackson-databind) component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2957](https://cve.now/CVE-2019-2957.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2958](https://cve.now/CVE-2019-2958.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (no CVSS, Oracle Java)
- [CVE-2019-2959](https://cve.now/CVE-2019-2959.md): Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Security Models). (no CVSS, Oracle Hyperion Financial Reporting)
- [CVE-2019-2960](https://cve.now/CVE-2019-2960.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2961](https://cve.now/CVE-2019-2961.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF services & legacy daemons). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2962](https://cve.now/CVE-2019-2962.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). (no CVSS, Oracle Java)
- [CVE-2019-2963](https://cve.now/CVE-2019-2963.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2964](https://cve.now/CVE-2019-2964.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). (no CVSS, Oracle Java)
- [CVE-2019-2965](https://cve.now/CVE-2019-2965.md): Vulnerability in the Siebel Core - DB Deployment and Configuration product of Oracle Siebel CRM (component: Install - Configuration). (no CVSS, Oracle Siebel Core - DB Deployment and Configuration)
- [CVE-2019-2966](https://cve.now/CVE-2019-2966.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2967](https://cve.now/CVE-2019-2967.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2968](https://cve.now/CVE-2019-2968.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2932](https://cve.now/CVE-2019-2932.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2933](https://cve.now/CVE-2019-2933.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (no CVSS, Oracle Java)
- [CVE-2019-2934](https://cve.now/CVE-2019-2934.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2019-2935](https://cve.now/CVE-2019-2935.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI). (no CVSS, Oracle Siebel UI Framework)
- [CVE-2019-2936](https://cve.now/CVE-2019-2936.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2019-2937](https://cve.now/CVE-2019-2937.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2019-2938](https://cve.now/CVE-2019-2938.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2939](https://cve.now/CVE-2019-2939.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2940](https://cve.now/CVE-2019-2940.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2941](https://cve.now/CVE-2019-2941.md): Vulnerability in the Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Modeling). (no CVSS, Oracle Hyperion Profitability and Cost Management)
- [CVE-2019-2942](https://cve.now/CVE-2019-2942.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (no CVSS, Oracle Advanced Outbound Telephony)
- [CVE-2019-2943](https://cve.now/CVE-2019-2943.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio). (no CVSS, Oracle Data Integrator)
- [CVE-2019-2944](https://cve.now/CVE-2019-2944.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2945](https://cve.now/CVE-2019-2945.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). (no CVSS, Oracle Java)
- [CVE-2019-2946](https://cve.now/CVE-2019-2946.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2947](https://cve.now/CVE-2019-2947.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2019-2948](https://cve.now/CVE-2019-2948.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2949](https://cve.now/CVE-2019-2949.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). (no CVSS, Oracle Java)
- [CVE-2019-2950](https://cve.now/CVE-2019-2950.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2905](https://cve.now/CVE-2019-2905.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). (no CVSS, Oracle Business Intelligence Enterprise Edition)
- [CVE-2019-2906](https://cve.now/CVE-2019-2906.md): Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: Mobile Service). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2907](https://cve.now/CVE-2019-2907.md): Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware (component: SOAP with Attachments API for Java). (no CVSS, Oracle Web Services)
- [CVE-2019-2909](https://cve.now/CVE-2019-2909.md): Vulnerability in the Java VM component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2910](https://cve.now/CVE-2019-2910.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2911](https://cve.now/CVE-2019-2911.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2913](https://cve.now/CVE-2019-2913.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2914](https://cve.now/CVE-2019-2914.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2915](https://cve.now/CVE-2019-2915.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2920](https://cve.now/CVE-2019-2920.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (no CVSS, Oracle MySQL Connectors)
- [CVE-2019-2922](https://cve.now/CVE-2019-2922.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2923](https://cve.now/CVE-2019-2923.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2924](https://cve.now/CVE-2019-2924.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2925](https://cve.now/CVE-2019-2925.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). (no CVSS, Oracle Workflow)
- [CVE-2019-2926](https://cve.now/CVE-2019-2926.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2927](https://cve.now/CVE-2019-2927.md): Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and Security). (no CVSS, Oracle Hyperion Data Relationship Management)
- [CVE-2019-2929](https://cve.now/CVE-2019-2929.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2930](https://cve.now/CVE-2019-2930.md): Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). (no CVSS, Oracle Field Service)
- [CVE-2019-2931](https://cve.now/CVE-2019-2931.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2872](https://cve.now/CVE-2019-2872.md): Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Point of Sale). (no CVSS, Oracle Retail Xstore Point of Service)
- [CVE-2019-2883](https://cve.now/CVE-2019-2883.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment (no CVSS, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2019-2884](https://cve.now/CVE-2019-2884.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment (no CVSS, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2019-2886](https://cve.now/CVE-2019-2886.md): Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Services). (no CVSS, Oracle Forms)
- [CVE-2019-2887](https://cve.now/CVE-2019-2887.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2888](https://cve.now/CVE-2019-2888.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2889](https://cve.now/CVE-2019-2889.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2890](https://cve.now/CVE-2019-2890.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2891](https://cve.now/CVE-2019-2891.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2894](https://cve.now/CVE-2019-2894.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). (no CVSS, Oracle Java)
- [CVE-2019-2895](https://cve.now/CVE-2019-2895.md): Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins). (no CVSS, Oracle Enterprise Manager for Exadata)
- [CVE-2019-2897](https://cve.now/CVE-2019-2897.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). (no CVSS, Oracle Enterprise Manager Base Platform)
- [CVE-2019-2898](https://cve.now/CVE-2019-2898.md): Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: BI Publisher Security). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2899](https://cve.now/CVE-2019-2899.md): Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM). (CVSS 2.4, Oracle Hyperion Financial Management)
- [CVE-2019-2900](https://cve.now/CVE-2019-2900.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). (no CVSS, Oracle Business Intelligence Enterprise Edition)
- [CVE-2019-2901](https://cve.now/CVE-2019-2901.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2902](https://cve.now/CVE-2019-2902.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2903](https://cve.now/CVE-2019-2903.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2904](https://cve.now/CVE-2019-2904.md): Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). (CVSS 9.8, Oracle Enterprise Repository · Oracle Rapid Planning)
- [CVE-2019-2734](https://cve.now/CVE-2019-2734.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2765](https://cve.now/CVE-2019-2765.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2875](https://cve.now/CVE-2018-2875.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2018-3300](https://cve.now/CVE-2018-3300.md): Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Internal Operations). (no CVSS, Oracle Retail Xstore Office)
- [CVE-2019-2896](https://cve.now/CVE-2019-2896.md): Vulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications (component: Internal Operations). (no CVSS, Oracle MICROS Relate CRM Software)
- [CVE-2019-17577](https://cve.now/CVE-2019-17577.md): An issue was discovered in Dolibarr 10.0.2. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-17578](https://cve.now/CVE-2019-17578.md): An issue was discovered in Dolibarr 10.0.2. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-17662](https://cve.now/CVE-2019-17662.md): ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. (no CVSS)
- [CVE-2019-6474](https://cve.now/CVE-2019-6474.md): A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate (CVSS 5.7, ISC Kea)
- [CVE-2019-6473](https://cve.now/CVE-2019-6473.md): A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate (CVSS 6.5, ISC Kea)
- [CVE-2019-6472](https://cve.now/CVE-2019-6472.md): A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate (CVSS 6.5, ISC Kea)
- [CVE-2019-17660](https://cve.now/CVE-2019-17660.md): A cross-site scripting (XSS) vulnerability in admin/translate/translateheader\_view.php in LimeSurvey 3.19.1 and earlier allows remote attack (no CVSS)
- [CVE-2019-11281](https://cve.now/CVE-2019-11281.md): RabbitMQ XSS attack (CVSS 2.4, Pivotal RabbitMQ)
- [CVE-2019-6334](https://cve.now/CVE-2019-6334.md): HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow pot (no CVSS, HP Color LaserJet CM4540 MFP,HP Color LaserJet Managed flow…)
- [CVE-2019-16522](https://cve.now/CVE-2019-16522.md): The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of sev (no CVSS)
- [CVE-2019-16521](https://cve.now/CVE-2019-16521.md): The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encodi (no CVSS)
- [CVE-2019-16523](https://cve.now/CVE-2019-16523.md): The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and inserti (no CVSS)
- [CVE-2019-16520](https://cve.now/CVE-2019-16520.md): The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of (no CVSS)
- [CVE-2019-10456](https://cve.now/CVE-2019-10456.md): A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an a (no CVSS, Jenkins project Jenkins Oracle Cloud Infrastructure Compute…)
- [CVE-2019-10457](https://cve.now/CVE-2019-10457.md): A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with Overall/Read permission to co (no CVSS, Jenkins project Jenkins Oracle Cloud Infrastructure Compute…)
- [CVE-2019-10458](https://cve.now/CVE-2019-10458.md): Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers abl (no CVSS, Jenkins project Jenkins Puppet Enterprise Pipeline · org.je…)
- [CVE-2019-10454](https://cve.now/CVE-2019-10454.md): A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attacker (no CVSS, Jenkins project Jenkins Rundeck Plugin · org.jenkins-ci.plu…)
- [CVE-2019-10455](https://cve.now/CVE-2019-10455.md): A missing permission check in Jenkins Rundeck Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL u (no CVSS, Jenkins project Jenkins Rundeck Plugin · org.jenkins-ci.plu…)
- [CVE-2019-10453](https://cve.now/CVE-2019-10453.md): Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by use (no CVSS, Jenkins project Jenkins Delphix Plugin · org.jenkins-ci.plu…)
- [CVE-2019-10450](https://cve.now/CVE-2019-10450.md): Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can (no CVSS, Jenkins project Jenkins ElasticBox CI Plugin · com.elasticb…)
- [CVE-2019-10451](https://cve.now/CVE-2019-10451.md): Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be view (no CVSS, Jenkins project Jenkins SOASTA CloudTest Plugin · com.soast…)
- [CVE-2019-10452](https://cve.now/CVE-2019-10452.md): Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed b (no CVSS, Jenkins project Jenkins View26 Test-Reporting Plugin · org.…)
- [CVE-2019-10449](https://cve.now/CVE-2019-10449.md): Jenkins Fortify on Demand Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by us (no CVSS, Jenkins project Jenkins Fortify on Demand Plugin · org.jenk…)
- [CVE-2019-10447](https://cve.now/CVE-2019-10447.md): Jenkins Sofy.AI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with E (no CVSS, Jenkins project Jenkins Sofy.AI Plugin · io.jenkins.plugins…)
- [CVE-2019-10448](https://cve.now/CVE-2019-10448.md): Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by us (no CVSS, Jenkins project Jenkins Extensive Testing Plugin · jenkins.…)
- [CVE-2019-10445](https://cve.now/CVE-2019-10445.md): A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to ob (no CVSS, Jenkins project Jenkins Google Kubernetes Engine Plugin · o…)
- [CVE-2019-10446](https://cve.now/CVE-2019-10446.md): Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM. (no CVSS, Jenkins project Jenkins Cadence vManager Plugin · org.jenki…)
- [CVE-2019-10442](https://cve.now/CVE-2019-10442.md): A missing permission check in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers with Overall/Read permission to connect to an atta (no CVSS, Jenkins project Jenkins iceScrum Plugin · org.jenkins-ci.pl…)
- [CVE-2019-10443](https://cve.now/CVE-2019-10443.md): Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be v (no CVSS, Jenkins project Jenkins iceScrum Plugin · org.jenkins-ci.pl…)
- [CVE-2019-10444](https://cve.now/CVE-2019-10444.md): Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM. (no CVSS, Jenkins project Jenkins Bumblebee HP ALM Plugin · org.jenki…)
- [CVE-2019-10440](https://cve.now/CVE-2019-10440.md): Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the (no CVSS, Jenkins project Jenkins NeoLoad Plugin · org.jenkins-ci.plu…)
- [CVE-2019-10441](https://cve.now/CVE-2019-10441.md): A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specifie (no CVSS, Jenkins project Jenkins iceScrum Plugin · org.jenkins-ci.pl…)
- [CVE-2019-10438](https://cve.now/CVE-2019-10438.md): A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission t (no CVSS, Jenkins project Jenkins CRX Content Package Deployer Plugin…)
- [CVE-2019-10439](https://cve.now/CVE-2019-10439.md): A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods al (no CVSS, Jenkins project Jenkins CRX Content Package Deployer Plugin…)
- [CVE-2019-10436](https://cve.now/CVE-2019-10436.md): An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs and (no CVSS, Jenkins project Jenkins Google OAuth Credentials Plugin · o…)
- [CVE-2019-10437](https://cve.now/CVE-2019-10437.md): A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to (no CVSS, Jenkins project Jenkins CRX Content Package Deployer Plugin…)
- [CVE-2019-4031](https://cve.now/CVE-2019-4031.md): IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in t (CVSS 8.4, IBM Workload Scheduler Distributed)
- [CVE-2019-15893](https://cve.now/CVE-2019-15893.md): Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution. (no CVSS)
- [CVE-2019-17629](https://cve.now/CVE-2019-17629.md): CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "file manager \> upload images" screen. (no CVSS)
- [CVE-2019-17630](https://cve.now/CVE-2019-17630.md): CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "News \> Add Article" screen. (no CVSS)
- [CVE-2019-17627](https://cve.now/CVE-2019-17627.md): The Yale Bluetooth Key application for mobile devices allows unauthorized unlock actions by sniffing Bluetooth Low Energy (BLE) traffic duri (no CVSS)
- [CVE-2019-17626](https://cve.now/CVE-2019-17626.md): ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document (CVSS 9.8, reportlab)
- [CVE-2019-17625](https://cve.now/CVE-2019-17625.md): There is a stored XSS in Rambox 0.6.9 that can lead to code execution. (no CVSS, Rambox)
- [CVE-2019-17624](https://cve.now/CVE-2019-17624.md): "" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. (no CVSS)
- [CVE-2016-11014](https://cve.now/CVE-2016-11014.md): NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case. (no CVSS)
- [CVE-2016-11015](https://cve.now/CVE-2016-11015.md): NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X\_TWSZ-COM\_URL\_Filter.BlackList.1.URL para (no CVSS)
- [CVE-2016-11016](https://cve.now/CVE-2016-11016.md): NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.