Skip to content
OpenAdvisories

Archive

October 2019

Vulnerabilities first published in this month (UTC), newest first.

← September 2019 2019 / October November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

172 results · Clear filters · Feed

  • Medium 6.8
    CVE-2019-12693

    Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability

    A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to the use of an incorrect data type for …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • Medium 4.1
    CVE-2019-12691

    Cisco Firepower Management Center Directory Traversal Vulnerability

    A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient inp…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 4.8
    CVE-2019-10212

    Potential to access user credentials from the log files when debug logging enabled

    A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.

    Red Hat undertow undertow undertow Debian Ubuntu Maven
  • Medium 6.1
    CVE-2019-12631

    Cisco Identity Services Engine Cross-Site Scripting Vulnerability

    A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.5
    CVE-2019-12630 EPSS 66%

    Cisco Security Manager Java Deserialization Vulnerability

    A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied cont…

    Cisco Cisco Security Manager Network devices
  • Medium 5.3
    CVE-2019-4549

    IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used …

    IBM Security Directory Server
  • Medium 6.1
    CVE-2019-4542

    IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…

    IBM Security Directory Server
  • Medium 6.1
    CVE-2019-17091

    Cross-site Scripting in Eclipse Mojarra

    faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.

    org.glassfish:javax.faces org.glassfish:jakarta.faces Maven
  • Medium 5.4
    CVE-2019-4497

    IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…

    IBM Jazz Reporting Service
  • Medium 5.4
    CVE-2019-4495

    IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…

    IBM Jazz Reporting Service
  • Medium 5.4
    CVE-2019-4494

    IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…

    IBM Jazz Reporting Service
  • Medium 5.4
    CVE-2019-10432

    Jenkins HTML Publisher Plugin vulnerable to Cross-site Scripting

    Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.

    Jenkins Project Jenkins HTML Publisher Plugin org.jenkins-ci.plugins:htmlpublisher Web / CMS Maven