CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- canonical ubuntu linux, debian advanced package tool, linux +3 more +5 moreIncorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and...8.1 High
- gnu glibc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would...5.3 Medium
- axway file tranfer directIn Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be...7.5 High
- teradata viewpointTeradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4...8.1 High
- labapart gattlibGattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c because...8.8 High
- sky goThe Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests...5.9 Medium
- hotels server project serverHotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username...9.8 Critical
- marvell 88w8787 firmware, 88w8797 firmware, 88w8801 firmware +2 more +4 moreThe ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801,...8.8 High
phpMageiaUpdated php packages fix security vulnerabilitiesNo score- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- check point software technologies ltd. rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function...7.5 High
- rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables...9.8 Critical
- rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap...9.8 Critical
- rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap...9.8 Critical
- rdesktoprdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap...9.8 Critical
- rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function...7.5 High
- rdesktop, debian linux, opensuse backports +1 more +3 morerdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap...9.8 Critical
- rdesktoprdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file...7.5 High
- rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead...7.5 High
- rdesktoprdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function...7.5 High
- broadcom spring batch, spring batch +1 moreSpring Batch XML External Entity Injection (XXE)9.8 Critical
- broadcom spring web services, spring web services, oracle financial services analytical applications infrastructure +1 more +3 moreSpring Web Services XML External Entity Injection (XXE)9.8 Critical
- spring integration, vmware spring integration, oracle retail customer management and segmentation foundation +2 moreSpring Integration XML External Entity Injection (XXE)9.8 Critical
- qualcomm mdm9607 firmware, mdm9640 firmware, mdm9650 firmware +19 more +21 moreException in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +14 more +16 moreImproper validation of buffer length checks in the lwm2m device management protocol can leads to...8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +14 more +16 moreImproper data length check while processing an event report indication can lead to a buffer...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +14 more +16 moreImproper length check while processing an MQTT message can lead to heap overflow in snapdragon...8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8909w firmware +11 more +13 moreImproper input validation in the QTEE keymaster app can lead to invalid memory access in...7.8 High
- qualcomm msm8996au firmware, sd 425 firmware, sd 430 firmware +14 more +16 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile,...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +22 more +24 moreAnti-rollback can be bypassed in replay scenario during app loading due to improper error...5.5 Medium
- dell networking os10DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability7.4 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +19 more +21 moreImproper input validation in trustzone can lead to denial of service in snapdragon automobile,...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +13 more +15 moreWhile processing a packet decode request in MQTT, Race condition can occur leading to an out-of...7.5 High
- qualcomm, inc. snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +2 moreImproper check while accessing the local memory stack on MQTT connection request can lead to...8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 morePossible undefined behavior due to lack of size check in function for parameter segment_idx can...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +10 more +12 moreSpoofed SMS can be used to send a large number of messages to the device which will in turn...9.3 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +44 more +46 moreLack of check of input size can make device memory get corrupted because of buffer overflow in...8.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8996au firmware +31 more +33 moreImproper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile...7.8 High
- qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +26 more +28 moreSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +9 more +11 moreImproper access control on secure display buffers in snapdragon automobile, snapdragon mobile and...7.8 High
- qualcomm mdm9635m firmware, mdm9645 firmware, mdm9650 firmware +6 more +8 moreAGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update...9.8 Critical
- Show moreLoading…