Archive

25 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /25 November 2019 →

All Critical High Medium Low Exploited only Public exploit

56 results · Feed

Unscored —

CVE-2019-8234

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery vulnerability. Successful exploita…

Adobe Adobe Experience Manager

Oct 25, 2019
Unscored —

CVE-2019-8088

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation…

Adobe Adobe Experience Manager

Oct 25, 2019
Unscored —

CVE-2019-8087

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful …

Adobe Adobe Experience Manager

Oct 25, 2019
Unscored —

CVE-2019-8086 Scanner template EPSS 23%

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful …

Adobe Adobe Experience Manager

Oct 25, 2019
Unscored —

CVE-2019-8085

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful…

Adobe Adobe Experience Manager

Oct 25, 2019
Unscored —

CVE-2019-8084

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful…

Adobe Adobe Experience Manager

Oct 25, 2019
Unscored —

CVE-2019-8083

Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation c…

Adobe Adobe Experience Manager

Oct 25, 2019
Unscored —

CVE-2019-8082

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful explo…

Adobe Adobe Experience Manager

Oct 25, 2019
Unscored —

CVE-2019-8081

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass vulnerability. Successful exploit…

Adobe Adobe Experience Manager

Oct 25, 2019
Critical 9.8

CVE-2015-0270

Zend Framework Allows SQL Injection

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

Zend Zend Framework zendframework/zendframework zendframework/zend-db Packagist

Oct 25, 2019
Unscored —

CVE-2016-5202

browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Wind…

chromium-browser chromium-browser chromium-browser oxide-qt Browsers Ubuntu

Oct 25, 2019
Unscored —

CVE-2016-2357

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.

Milesight IP security cameras

Oct 25, 2019
Unscored —

CVE-2016-2356

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or pas…

Milesight IP security cameras

Oct 25, 2019
Unscored —

CVE-2016-2359

Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected…

Milesight IP security cameras

Oct 25, 2019
Unscored —

CVE-2016-2358

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credential…

Milesight IP security cameras

Oct 25, 2019
Unscored —

CVE-2016-2360

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across di…

Milesight IP security cameras

Oct 25, 2019