Browse CVEs

HIGH 7.8 CVE-2019-13541 In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files … Cscape after 9.90 Fix from $1,9502019-10-18 HIGH 7.5 CVE-2019-11253EPSS 26% Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows aut… Kubernetes 1.13.12 / 1.14.8+ Fix from $1,9502019-10-17 CRITICAL 9.8 CVE-2019-16699 The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of … Sr Freecap after 2.5.2 Fix from $2,3002019-10-16 MEDIUM 6.5 CVE-2019-15265 A vulnerability in the bridge protocol data unit (BPDU) forwarding functionality of Cisco Aironet Access Points (APs) could allow an unauthenticated,… Aironet 1540 Firmware 8.5.151.0 / 8.8.120.0+ Fix from $1,6002019-10-16 MEDIUM 6.7 CVE-2019-15274 A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to perform command… Telepresence Collaboration Endpoint 9.8.1+ Fix from $1,6002019-10-16 HIGH 8.6 CVE-2019-15261 A vulnerability in the Point-to-Point Tunneling Protocol (PPTP) VPN packet processing functionality in Cisco Aironet Access Points (APs) could allow … Aironet 1810 Firmware 8.5.151.0 / 8.8.125.0+ Fix from $1,9502019-10-16 HIGH 7.5 CVE-2019-15262 A vulnerability in the Secure Shell (SSH) session management for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote … 5520 Wireless Lan Controller Firmware after 8.5.140.0 Fix from $1,9502019-10-16 HIGH 7.5 CVE-2019-17507 An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top… Dir 816 A1 Firmware No fix yet Fix from $1,9502019-10-11 MEDIUM 6.8 CVE-2019-1230EPSS 6% An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input fr… Windows 10 Patch available Fix from $1,6002019-10-10 HIGH 7.8 CVE-2019-5700 NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields … Shield Experience 8.0.1+ Fix from $1,9502019-10-09 CRITICAL 9.8 CVE-2019-15019 A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attacker to supply an invalid software updat… Inspector after 1.294 Fix from $2,3002019-10-09 HIGH 8.8 CVE-2019-0070 An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX pla… Junos after 18.1 Fix from $1,9502019-10-09 HIGH 7.2 CVE-2019-10969EPSS 11% Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, … Edr 810 Firmware after 5.1 Fix from $1,9502019-10-08 HIGH 7.5 CVE-2018-21020 In very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web before 2.8.27 allows attackers to bypass authenticati… Centreon Web 2.8.27+ Fix from $1,9502019-10-08 HIGH 8.8 CVE-2019-17346 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatib… Debian Linux after 4.11.2 Fix from $1,9502019-10-08 HIGH 7.8 CVE-2019-17347 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can mani… Debian Linux after 4.11.2 Fix from $1,9502019-10-08 MEDIUM 6.5 CVE-2019-17348 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Proce… Debian Linux after 4.11.2 Fix from $1,6002019-10-08 CRITICAL 9.8 CVE-2019-17042 An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parse… Fedora Patch available Fix from $2,3002019-10-07 CRITICAL 9.8 CVE-2019-17132EPSS 12% vBulletin through 5.5.4 mishandles custom avatars. Vbulletin after 5.5.4 Fix from $2,3002019-10-04 CRITICAL 9.8 CVE-2018-10103 tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). Tcpdump 4.9.3+ Fix from $2,3002019-10-03 CRITICAL 9.8 CVE-2018-10105 tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). Tcpdump 4.9.3+ Fix from $2,3002019-10-03 HIGH 8.8 CVE-2019-12687 A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary comma… Secure Firewall Management Center Mitigation only Fix from $1,9502019-10-02 HIGH 8.8 CVE-2019-12688 A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary comma… Secure Firewall Management Center Mitigation only Fix from $1,9502019-10-02 HIGH 8.8 CVE-2019-12689 A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attack… Secure Firewall Management Center 6.2.2.2+ Fix from $1,9502019-10-02 MEDIUM 6.7 CVE-2019-12694 A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker wit… Secure Firewall Threat Defense 6.3.0.5 / 6.4.0.4+ Fix from $1,6002019-10-02 HIGH 7.8 CVE-2019-12699 Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local atta… Firepower 9300 Firmware 2.2.2.101 / 2.3.1.155+ Fix from $1,9502019-10-02 MEDIUM 5.8 CVE-2019-12701 A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote… Secure Firewall Management Center 327+ Fix from $1,6002019-10-02 HIGH 7.5 CVE-2019-12706 A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an … Email Security Appliance Firmware 13.5.0+ Fix from $1,9502019-10-02 HIGH 7.5 CVE-2019-12673 A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow … Adaptive Security Appliance 6.3.0.5 / 6.4.0.4+ Fix from $1,9502019-10-02 HIGH 7.4 CVE-2019-12676 A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat … Adaptive Security Appliance 6.3.0.4 / 6.4.0.4+ Fix from $1,9502019-10-02