CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +33 more +35 moreResource allocation error while playing the video whose dimensions are more than supported...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +22 more +24 moreWrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9650 firmware, msm8909w firmware +33 more +35 moreAn unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +33 more +35 moreAn unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 moreA non-time constant function memcmp is used which creates a side channel that could leak...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +18 more +20 moreBuffer overflow in WLAN function due to improper check of buffer size before copying in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreOut of bounds read occurs due to improper validation of array while processing VDEV stop response...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +16 more +18 moreBuffer overflow in WLAN driver event handlers due to improper validation of array index in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +16 more +18 moreA buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreUse-after-free vulnerability will occur if reset of the routing table encounters an invalid rule...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreOut of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 moreOut-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreMetadata verification and partial hash system calls by bootloader may corrupt parallel hashing...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +45 more +47 moreTruncated access authentication token leads to weakened access control for stored secure...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +50 more +52 moreWhile deserializing any key blob during key operations, buffer overflow could occur, exposing...5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +50 more +52 moreThe HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreOut of bounds memory read and access due to improper array index validation may lead to...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreDue to missing permissions in Android Manifest file, Sensitive information disclosure issue can...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreOut-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +46 more +48 moreLack of check on length of reason-code fetched from payload may lead driver access the memory not...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8064 firmware, mdm9150 firmware +40 more +42 moreThe txrx stats req might be double freed in the pdev detach when the host driver is unloading in...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +31 more +33 moreFailure to initialize the reserved memory which is sent to the firmware might lead to exposure of...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 moreUse after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +31 more +33 morePossible out of bounds write due to improper input validation while processing DO_ACS vendor...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreLack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +18 more +20 moreUse after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +53 more +55 moreKernel can inject faults in computations during the execution of TrustZone leading to information...5.5 Medium
lactatenpmDirectory Traversal in lactate7.5 Highunderscore.stringnpmRegular Expression Denial of Service in underscore.stringNo scoreconstantinoplenpmSandbox Bypass Leading to Arbitrary Code Execution in constantinople10.0 CriticalsquelnpmFailure to sanitize quotes which can lead to sql injection in squelNo score- hclsoftware connectionsIBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to...5.4 Medium
- ibm iIBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by...5.9 Medium
- ibm cloud private, mq advanced cloud pak (ibm cloud private on redhat openshift), mq advanced cloud pak (ibm cloud private) +2 moreIBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in...6.2 Medium
- atlassian sourcetree, sourcetree for windows +1 moreAn argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all...8.8 High
- eclipse buildship, the eclipse foundation eclipse buildship +1 moreIn Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is...8.1 High
- red hat cfme, redhat cfme-gemset, cloudforms +2 morecfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to...4.3 Medium
- embedthis goaheadIn http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability...7.5 High
- zncModules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate...8.8 High
- mozilla thunderbirdA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 High
- mozilla thunderbirdA flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in...9.8 Critical
- mozilla thunderbirdA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 Critical
- mozilla thunderbirdA flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreA flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies...5.9 Medium
- crossmatch digital persona u.are.u 4500 firmwareAn issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt...5.9 Medium
- radare radare2, fedoraproject fedora +1 moreIn radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing...7.8 High
@apollo/gatewaynpmPrototype Pollution in @apollo/gateway7.3 High- bd alaris cc syringe pump firmware, alaris gateway workstation firmware, alaris gh syringe pump firmware +2 more +4 moreBD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0...10.0 Critical
- bd alaris gateway workstation firmwareBD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web...5.3 Medium
- shopwareShopware Insecure Deserialization Vulnerability6.5 Medium
- Show moreLoading…