CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. It has a hidden support account (with a...9.8 Critical
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it...7.2 High
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution...7.5 High
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. It exposes a database configuration file...2.7 Low
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root...8.1 High
- anviz crosschexAnviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer...9.8 Critical
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php,...7.5 High
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically...9.8 Critical
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low...7.8 High
- anviz firmwareAnviz access control devices perform cleartext transmission of sensitive information (passwords...7.5 High
- anviz firmwareAnviz access control devices expose credentials (names and passwords) by allowing remote...7.5 High
- anviz firmwareAnviz access control devices expose private Information (pin code and name) by allowing remote...5.3 Medium
- anviz management systemAnviz access control devices allow unverified password change which allows remote attackers to...9.8 Critical
- anviz firmwareAnviz access control devices allow remote attackers to issue commands without a password.9.8 Critical
- json pattern validator project pattern validatorValidation bypass is possible in Json Pattern Validator5.3 Medium
- anviz management systemThe Anviz Management System for access control has insufficient logging for device events such as...7.5 High
- anviz management systemAnviz access control devices are vulnerable to replay attacks which could allow attackers to...7.5 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security 2020 +3 more +5 moreTrend Micro Security (Consumer) 2020 (v16.0.1221 and below) is affected by a DLL hijacking...7.8 High
- maleck image uploader and browser for ckeditorpluginconfig.php in the Image Uploader and Browser plugin before 4.1.9 for CKEditor mishandles...9.8 Critical
- napc xinet elegant 6 asset libraryNAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the ...9.8 Critical
- djangoproject django, fedoraproject fedora +1 moreDjango allows unintended model editing6.5 Medium
- alfrescoAlfresco Enterprise 5.2.4 allows stored XSS via an uploaded HTML document.5.4 Medium
- teamviewerAn issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730...4.3 Medium
- kentico xperienceKentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with...5.4 Medium
- mulesoft api gateway, mule ce/ee 3.x, mule api gateway 2.x +1 more +3 moreRemote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released...9.8 Critical
- smplayerSMPlayer 19.5.0 has a buffer overflow via a long .m3u file.5.5 Medium
- litemanagerLiteManager 4.5.0 has weak permissions (Everyone: Full Control) in the "LiteManagerFree - Server"...7.3 High
- testlinkTestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php...6.1 Medium
- freeswitchFreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.9.8 Critical
openafsopenSUSERecommended update for openafsNo score- opensc project opensc, debian linux, fedoraproject fedora +2 moreAn issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card...5.5 Medium
- opensc project openscAn issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card...4.6 Medium
- opensc project openscAn issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15...4.6 Medium
- rabbitmq-c project rabbitmq-c, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is...9.8 Critical
- zmanda amandaIn Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command=...8.8 High
asteriskDebianasterisk - regression updateNo score