CVEs published in September 2019

1,651 vulnerabilities, 183 critical, 11 exploited.

• dell rsa bsafe crypto-c micro edition, emc rsa bsafe crypto-c, dell bsafe crypto-c-micro-edition +1 more +3 more RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3)... CVE-2019-3733 4.4 MediumSeptember 30, 2019
• dell rsa bsafe crypto-c micro edition, emc rsa bsafe crypto-c, dell bsafe crypto-c-micro-edition +2 more +4 more RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1... CVE-2019-3732 5.9 MediumSeptember 30, 2019
• dell rsa bsafe crypto-c micro edition, bsafe crypto-c-micro-edition, bsafe micro-edition-suite +1 more +3 more RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions... CVE-2019-3731 5.9 MediumSeptember 30, 2019
• dell bsafe micro-edition-suite, rsa bsafe mes +1 more RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and... CVE-2019-3730 5.9 MediumSeptember 30, 2019
• dell bsafe micro-edition-suite, rsa bsafe mes +1 more RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are... CVE-2019-3729 2.4 LowSeptember 30, 2019
• dell bsafe crypto-c, rsa bsafe crypto-c micro edition, rsa bsafe micro edition suite +3 more +5 more RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 (in 4.0.x) and 4.1.4 (in 4.1.x) and... CVE-2019-3728 7.5 HighSeptember 30, 2019
• rust cargo, rust-lang rust +1 more Cargo prior to Rust 1.26.0 may download the wrong dependency CVE-2019-16760 Fix available 4.6 MediumSeptember 30, 2019
• PeterO.Cbor NuGet High severity vulnerability that affects PeterO.Cbor GHSA-cxw4-9qv9-vx5h Fix available No scoreSeptember 30, 2019
• centra npm Buffer Overflow in centra GHSA-v6cj-r88p-92rm Fix available 7.3 HighSeptember 30, 2019
• foxitsoftware foxit reader Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions... CVE-2019-13124 7.5 HighSeptember 30, 2019
• foxitsoftware foxit reader Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions... CVE-2019-13123 7.5 HighSeptember 30, 2019
• evernote Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute... CVE-2019-17051 7.8 HighSeptember 30, 2019
• thecontrolgroup voyager An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin... CVE-2019-17050 7.2 HighSeptember 30, 2019
• netgear srx5308 firmware NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019... CVE-2019-17049 7.5 HighSeptember 30, 2019
• sandisk ssd dashboard Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1... CVE-2019-13467 5.9 MediumSeptember 30, 2019
• sandisk ssd dashboard Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have... CVE-2019-13466 7.5 HighSeptember 30, 2019
• netdisco Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via... CVE-2019-15810 6.1 MediumSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable... CVE-2019-2341 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +36 more +38 more Buffer overflow due to improper validation of buffer size while IPA driver processing to perform... CVE-2019-2333 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9205 firmware, mdm9206 firmware +45 more +47 more Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap... CVE-2019-2294 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +19 more +21 more Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in... CVE-2019-2284 7.0 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9650 firmware, msm8909w firmware +34 more +36 more Classic buffer overflow vulnerability while playing the specific video whose Decode picture... CVE-2019-2252 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, msm8996au firmware +25 more +27 more Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN... CVE-2019-10540 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +47 more +49 more Possible buffer overflow issue due to lack of length check when parsing the extended cap IE... CVE-2019-10539 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +25 more +27 more Lack of check of address range received from firmware response allows modem to respond arbitrary... CVE-2019-10538 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, qualcomm qcs405 firmware, qcs605 firmware +10 more +12 more BT process died and BT toggled due to null pointer dereference when invalid vendor pass through... CVE-2019-10510 8.2 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +30 more +32 more Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto,... CVE-2019-10509 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +24 more +26 more Lack of input validation for data received from user space can lead to OOB access in WLAN in... CVE-2019-10508 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 more Lack of check of extscan change results received from firmware can lead to an out of buffer read... CVE-2019-10507 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 more While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not... CVE-2019-10506 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 more Possible use after free issue due to improper input validation in volume listener library in... CVE-2019-10501 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +6 more +8 more Improper validation of read and write index of tx and rx fifo`s before using for data copy from... CVE-2019-10499 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in... CVE-2019-10498 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 more Use after free issue occurs If another instance of open for voice_svc node has been called from... CVE-2019-10497 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon mobile, snapdragon wearables, qualcomm mdm9607 firmware, msm8909w firmware +16 more +18 more Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon... CVE-2019-10492 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto... CVE-2019-10489 7.5 HighSeptember 30, 2019
• xoops An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript... CVE-2019-16684 4.8 MediumSeptember 30, 2019
• ibm sterling file gateway IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse... CVE-2019-4423 5.3 MediumSeptember 30, 2019
• ibm websphere application server IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive... CVE-2019-4305 5.3 MediumSeptember 30, 2019
• ibm websphere application server IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security... CVE-2019-4304 6.3 MediumSeptember 30, 2019
• ibm sterling file gateway IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests... CVE-2019-4280 5.3 MediumSeptember 30, 2019
• ibm websphere extreme scale IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting. This... CVE-2019-4115 5.4 MediumSeptember 30, 2019
• ibm websphere extreme scale IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be... CVE-2019-4112 4.0 MediumSeptember 30, 2019
• ibm websphere extreme scale IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the... CVE-2019-4109 6.1 MediumSeptember 30, 2019
• ibm websphere extreme scale IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting. This... CVE-2019-4106 4.8 MediumSeptember 30, 2019
• xoops An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the... CVE-2019-16683 4.8 MediumSeptember 30, 2019
• themeisle visualizer A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json... CVE-2019-16932 EPSS 39.0% 10.0 CriticalSeptember 30, 2019
• ilch cms Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index... CVE-2019-17046 7.2 HighSeptember 30, 2019
• ilch cms Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab. CVE-2019-17045 4.8 MediumSeptember 30, 2019
• rsyslog contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level... CVE-2019-17040 Fix available 9.8 CriticalSeptember 30, 2019
• Show olderLoading…