CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- iobroker iobroker.js-controllerArbitrary File Write in iobroker.js-controller7.5 High
- xcftools project xcftools, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the...8.8 High
- xcftools project xcftools, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the...7.5 High
- netapp ontap select deploy administration utilityAll versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability...7.2 High
- netapp ontap select deploy administration utilityONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a...9.8 Critical
- asus rt-ac66u firmwareStack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS...9.8 Critical
- fortinet fortios, fortigate +1 moreUse of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup...6.5 Medium
- fortinet forticlient, forticlient for mac os +1 moreAn Improper Neutralization of Special Elements used in a Command vulnerability in one of...7.8 High
- fortinet forticlient, forticlient for mac os, forticlient for windows +1 more +3 moreUse of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow...5.9 Medium
- fortinet forticlient, forticlient for mac os +1 moreA clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a...5.5 Medium
- linksys velop whw0301 firmware, velop whw0302 firmware, velop whw0303 firmware +2 moreBelkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +13 more +15 moreOut of bound access due to lack of check of whiltelist array size while reading the image elf...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +5 more +7 moreSubsequent use of the CBO listener may result in further memory corruption due to use after free...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 moreWhile processing Attach Reject message, Valid exit condition is not met resulting into an...7.5 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +11 more +13 moreUse after free issue in cleanup routine due to missing pointer sanitization for a failed start of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8053 firmware +17 more +19 moreNon Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreWhile invoking the API to copy from fd or local buffer to the secure buffer, Parameters being...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreSNDCP module may access array out side its boundary when it receives malformed XID message. in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +28 more +30 moreBuffer overflow can occur while processing non-standard NAN message from user space. in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +30 more +32 moreInformation disclosure due to lack of address range check done on the SysDBG buffers in SDI code....5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreLack of integrity check allows MODEM to accept any NAS messages which can result into...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreBuffer over read can happen while parsing downlink session management OTA messages if network...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +24 more +26 morePossible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, ipq4019 firmware +14 more +16 morePossible double free issue in kernel while handling the camera sensor and its sub modules power...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8016 firmware, apq8096au firmware +25 more +27 moreIf a bitmap file is loaded from any un-authenticated source, there is a possibility that the...7.8 High
- qualcomm ips, qualcomm, inc. postscript and pdf printers that use ips versions prior to 2019.2, hp 2dr21d firmware +40 more +42 moreInteger overflow to buffer overflow vulnerability in PostScript image handling code used by the...9.8 Critical
- qualcomm qca6174 firmware, qualcomm, inc. qca6174 9377.win.1.0 +1 moreLow privilege users can access service configuration which contains registry data that admins...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8053 firmware +24 more +26 moreBuffer overflow can occur in wlan module if supported rates or extended rates element length is...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +10 more +12 moreBuffer over-read can occur in fast message handler due to improper input validation while...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +11 more +13 moreImproper validation for loop variable received from firmware can lead to out of bound access in...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +25 more +27 moreOut-of-bounds access can occur in camera driver due to improper validation of array index in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 moreUse after free issue in Xtra daemon shutdown due to static object instance getting freed from a...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +34 more +36 moreRace condition due to the lack of resource lock which will be concurrently modified in the memcpy...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreOut-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt...7.8 High
- zohocorp manageengine opmanager, manageengine firewall analyzer +1 moreIncorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager...7.8 High
- edeploy, redhat jboss enterprise web server +1 moreeDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data9.8 Critical
- rply project rplyLink Following in rply5.5 Medium
- gamera project gameraGamera before 3.4.1 insecurely creates temporary files.7.5 High
- rc project rc, debian linux +1 morerc before 1.7.1-5 insecurely creates temporary files.7.5 High
- 9base project 9base, debian linux +1 more9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.5.3 Medium
- sillycycle xlockmore, fedoraproject fedora +1 morexlockmore before 5.43 'dclock' security bypass vulnerability7.5 High
- jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability8.8 High
- jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin Missing Authorization vulnerability4.3 Medium
- jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin5.9 Medium
- jenkins project qmetry for jira - test management plugin, qmetry jenkins qmetry for jira +1 moreJenkins QMetry for JIRA Plugin shows plain text password in configuration form6.5 Medium
- jenkins project qmetry for jira - test management plugin, qmetry jenkins qmetry for jira +1 moreJenkins QMetry for JIRA Plugin stored credentials in plain text8.8 High
- jenkins spira importer, jenkins project spira importer plugin +1 morePlaintext Storage in Jenkins Spira Importer Plugin5.5 Medium
- jenkins anchore container image scanner, jenkins project anchore container image scanner plugin +1 moreJenkins Anchore Container Scanner Plugin vulnerable to Insufficiently Protected Credentials6.5 Medium
- jenkins jira, jenkins project jira plugin +1 moreJenkins JIRA Plugin allows users to select and use credentials with System scope9.9 Critical
- jenkins support core, jenkins project support core plugin +1 moreJenkins Support Core Plugin allowed users with Overall/Read permission to delete arbitrary files6.5 Medium
- Show moreLoading…