CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreWhile storing calibrated data from firmware in cache, An integer overflow may occur since data...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +33 more +35 moreUser application could potentially make RPC call to the fastrpc driver and the driver will allow...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 morePossible integer underflow due to lack of validation before calculation of data length in 802.11...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper casting of structure while handling the buffer leads to out of bound read in display in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreOut of bound access when reason code is extracted from frame data without validating the frame...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +22 more +24 morePossibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +38 more +40 moreAn out-of-bound write can be triggered by a specially-crafted command supplied by a userspace...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreProtection is missing while accessing md sessions info via macro which can lead to use-after-free...7.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +19 more +21 morePointer dereference while freeing IFE resources due to lack of length check of in port resource....7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreMultiple open and close from multiple threads will lead camera driver to access destroyed session...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm qcs405 firmware, qcs605 firmware +18 more +20 moreAn unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, qualcomm mdm9607 firmware, mdm9640 firmware +13 more +15 moreUser keystore signature is ignored in boot and can lead to bypass boot image signature...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, msm8996au firmware +20 more +22 morePossible out of bound read occurs while processing beaconing request due to lack of check on...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs605 firmware +28 more +30 moreIOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreBuffer overflow can occur in display function due to lack of validation of header block size set...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +31 more +33 moreAccess to freed memory can happen while reading from diag driver due to use after free issue in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 morePosition determination accuracy may be degraded due to wrongly decoded information in Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 moreBuffer over-read can occur while parsing an ogg file with a corrupted comment block. in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreWhile rendering the layout background, Error status check is not caught properly and also...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +48 more +50 moreWhile sending the rendered surface content to the screen, Error handling is not properly checked...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreSanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 moreLack of check of data type can lead to subsequent loop-expression potentially go negative and the...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 moreFailure in taking appropriate action to handle the error case If keypad gpio deactivation fails...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +36 more +38 moreNull pointer dereference during secure application termination using specific application ids. in...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +33 more +35 moreBuffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +27 more +29 moreClients hostname gets added to DNS record on device which is running dnsmasq resulting in an...7.5 High
- comodo antivirus, firewall, internet security +2 moreComodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet...7.1 High
- broadlearning eclass, eclass ip +1 moreeClass platform contains a SQL injection vulnerability9.8 Critical
- broadlearning eclass, eclass ip +1 moreeClass platform contains a Broken Access Control vulnerability9.8 Critical
- mcafee, llc data loss prevention (dlpe) for windows, mcafee data loss prevention endpoint +1 moreDLP Endpoint Windows lock screen bypass with physical access6.8 Medium
- octopus deployIn Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an...6.5 Medium
- opensnsOpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of...8.8 High
- ibm cloud privateIBM Cloud Private 3.1.0, 3.1.1, and 3.1.2 does not invalidate session after logout which could...5.9 Medium
- ibm cloud privateIBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to...4.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an...4.3 Medium
- ibm cloud privateIBM Cloud Private 2.1.0, 3.1.0, and 3.1.1 could disclose highly sensitive information in...5.5 Medium
- micro focus arcsight security management center, hp arcsight management center +1 moreArcSight Security Management Center stored cross site script issue in version prior to 2.9.14.6 Medium
- perl-crypt-jwtperl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass...9.8 Critical
- jsishJsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of...7.5 High
- cimg library, the cimg library, debian linux +2 moreCImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE....9.8 Critical
- jerryscriptJerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The...9.8 Critical
- yaml-rustyaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of...6.5 Medium
- serde yaml, serde-yaml project serde-yaml +1 moreserde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of...6.5 Medium
- metadataextractor project metadataextractorUncontrolled Resource Consumption in MetadataExtractor7.5 High
- exim, debian linux +1 moreExim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual...9.8 Critical
- facebook zstandardA race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could...8.1 High
- gnu patchdo_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a !...7.8 High
- red hat ansible, debian linux, redhat openstack +2 moreExposure of Sensitive Information to an Unauthorized Actor in ansible4.6 Medium
drupal/existing_values_autocomplete_widgetPackagistThis module provides an autocomplete widget for text fields that suggests all existing (previously entered) values for that field. The module doesn't sufficiently check for proper access permission be…No scoredrupal/metatagPackagistThis module enables you to customize meta tags to help with a site's search engine ranking and improve the display of page summaries when shared on social networks. The module doesn't sufficiently che…No score- Show moreLoading…