CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreOut of boundary access due to token received from ADSP and is used without validation as an index...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +31 more +33 moreWhen ADSP is compromised, the audio port index that`s returned from ADSP might be out of the...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreLack of check to ensure crypto engine data passed by user is initialized can result in bus error...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +28 more +30 moreWhile processing vendor command which contains corrupted channel count, an integer overflow...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 moreOut of bound write issue is observed while giving information about properties that have been set...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 moreImproper validation of read and write index of tx and rx fifo`s before calculating pointer can...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9205 firmware +41 more +43 moreWhile deserializing any key blob during key operations, buffer overflow could occur exposing...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +48 more +50 moreImproper validation of array index causes OOB write and then leads to memory corruption in MMCP...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9205 firmware +25 more +27 moreKernel can do a memory read from arbitrary address passed by user during execution of a syscall...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9205 firmware, mdm9640 firmware +31 more +33 moreThread start can cause invalid memory writes to arbitrary memory location since the argument is...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +11 more +13 moreDouble free issue can happen when sensor power settings is freed by some thread while another...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreBuffer over-read may occur when downloading a corrupted firmware file that has chunk length in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +34 more +36 moreDereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 moreNull-pointer dereference can occur while accessing the super index entry when it is not been...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 moreOut of bound access due to improper validation of array index cause the index table entry to get...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon mobile, snapdragon wearables, qualcomm mdm9607 firmware, msm8909w firmware +11 more +13 moreIncorrect reading of system image resulting in buffer overflow when size of system image is...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 morePossible use after free issue due to race condition while attempting to mark the entry pages as...8.1 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreUse after free issue in kernel while accessing freed mdlog session info and its attributes after...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreLack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 moreWhile playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 moreDCI client which might be preemptively freed up might be accessed for transferring packets...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +46 more +48 morePayload size is not checked before using it as array index in audio in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreOut of bound access while processing a non-standard IE measurement request with length crossing...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +25 more +27 moreFirmware not able to send EXT scan response to host within 1 sec due to resource consumption...6.5 Medium
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +22 more +24 morePossible stack overflow when an index equal to io buffer size is accessed in camera module in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 moreLack of checking a variable received from driver and populating in Firmware data structure leads...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 moreArbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +45 more +47 moreADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreNull pointer dereference can occur while parsing invalid chunks while playing the nonstandard...7.5 High
- makepasswdmakepasswd 1.10 default settings generate insecure passwords7.5 High
- ruby-rbot rbotRbot Reaction plugin allows command execution9.8 Critical
- rakuten viberViber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to...8.8 High
- progress sitefinity cmsProgress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News...6.1 Medium
- sass-lang libsassLibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in...6.5 Medium
- sass-lang libsassLibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave...6.5 Medium
- sass-lang libsassLibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in...6.5 Medium
- technicolor c2000t, c2100t, c2000t firmware +1 more +3 moreTechnicolor C2000T and C2100T uses hard-coded cryptographic keys.5.9 Medium
- quest kace systems management applianceQuest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the...5.4 Medium
- quest kace systems management applianceQuest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an...5.4 Medium
- quest kace systems management applianceQuest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An...8.8 High
- quest kace systems management applianceQuest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An...8.8 High
- quest kace systems management applianceQuest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the...6.1 Medium
- quest kace systems management applianceQuest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An...8.8 High
- red hat enterprise linux, redhat enterprise mrg +1 moreThe kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer,...5.5 Medium
- quest kace systems management applianceQuest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL...9.8 Critical
- quest kace systems management applianceA reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1...6.1 Medium
- arubanetworks clearpassAruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain...9.8 Critical
- archivemail, debian linux +1 morearchivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.8.1 High
- linux-2.6, linux-vserver +1 morelinux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.9.8 Critical
- termpkg project termpkgtermpkg 3.3 suffers from buffer overflow.9.8 Critical
- Show moreLoading…