| CVE |
Vendors |
Products |
Updated |
CVSS |
| CVE-2016-0304 |
1 Ibm |
1 Domino |
2019-10-16 |
6.8 |
| The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary... |
| CVE-2016-0277 |
1 Ibm |
1 Domino |
2019-10-16 |
6.8 |
| Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0278,... |
| CVE-2016-0278 |
1 Ibm |
1 Domino |
2019-10-16 |
6.8 |
| Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277,... |
| CVE-2016-0279 |
1 Ibm |
1 Domino |
2019-10-16 |
6.8 |
| Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277,... |
| CVE-2019-6538 |
1 Medtronic |
20 Amplia Crt-d Firmware, Carelink 2090 Firmware, Carelink Monitor Firmware and 17 more |
2019-10-10 |
3.3 |
| The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta... |
| CVE-2019-1226 |
1 Microsoft |
3 Windows 10, Windows Server 2016, Windows Server 2019 |
2019-10-10 |
10.0 |
| A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop... |
| CVE-2019-1222 |
1 Microsoft |
3 Windows 10, Windows Server 2016, Windows Server 2019 |
2019-10-10 |
10.0 |
| A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop... |
| CVE-2019-1182 |
1 Microsoft |
8 Windows 10, Windows 7, Windows 8.1 and 5 more |
2019-10-10 |
10.0 |
| A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop... |
| CVE-2019-1181 |
1 Microsoft |
8 Windows 10, Windows 7, Windows 8.1 and 5 more |
2019-10-10 |
10.0 |
| A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop... |
| CVE-2019-11653 |
1 Microfocus |
1 Content Manager |
2019-10-10 |
5.5 |
| Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user?s CheckIn request. |
| CVE-2019-10970 |
|
|
2019-10-10 |
10.0 |
| In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display,... |
| CVE-2019-10964 |
1 Medtronic |
19 Minimed 508 Firmware, Minimed Paradigm 511 Firmware, Minimed Paradigm 512 Firmware and 16 more |
2019-10-10 |
5.8 |
| In Medtronic MinMed 508 and Medtronic Minimed Paradigm Insulin Pumps, Versions, MiniMed 508 pump ? All versions, MiniMed Paradigm 511 pump ? All versions, MiniMed Paradigm 512/712 pumps ? All versions, MiniMed Paradigm 712E pump?All versions,... |
| CVE-2010-5305 |
1 Rockwellautomation |
3 Rslogix, Plc5 1785-lx Firmware, Slc5%2f01 1747-l5x Firmware |
2019-10-10 |
7.5 |
| The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to... |
| CVE-2019-9921 |
1 Harmistechnology |
1 Je Messenger |
2019-10-09 |
N/A |
| An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user. |
| CVE-2019-9901 |
1 Envoyproxy |
1 Envoy |
2019-10-09 |
7.5 |
| Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., something/../admin, to bypass access control, e.g., a block on /admin. A backend server could then interpret the non-normalized path and... |
| CVE-2019-9886 |
1 Eclass |
1 Eclass Ip |
2019-10-09 |
5.0 |
| Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1. |
| CVE-2019-8994 |
1 Tibco |
2 Activematrix Business Process Mangement, Silver Fabric Enabler |
2019-10-09 |
4.9 |
| The workspace client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contains vulnerabilities where an authenticated user can... |
| CVE-2019-8993 |
1 Tibco |
5 Activematrix Bpm, Activematrix Policy Director, Activematrix Service Bus and 2 more |
2019-10-09 |
5.0 |
| The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service... |
| CVE-2019-8282 |
|
|
2019-10-09 |
2.6 |
| Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle (MITM) attack and replace original language pack by... |
| CVE-2019-8275 |
1 Uvnc |
1 Ultravnc |
2019-10-09 |
7.5 |
| UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These... |
