CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- saltosystem proaccess spaceAn issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content...9.8 Critical
- saltosystem proaccess spaceAn issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a...5.5 Medium
ucode-intelopenSUSESecurity update for ucode-intelNo score- autodesk fbx software development kitBuffer overflow vulnerability in Autodesk FBX Software Development Kit version 2019.5. A user may...7.8 High
- autodesk desktopDLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An...7.8 High
- harborA User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and i…4.3 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a...4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious...4.6 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreIn the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious...4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a...6.8 Medium
- linux kernelIn the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious...6.1 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a...6.3 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a...4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious...6.8 Medium
- linux kernelIn the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused...6.8 Medium
- linux kernelIn the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB...2.4 Low
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious...2.4 Low
- debian linux, linux kernel, opensuse leap +1 more +3 moreIn the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB...4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB...4.6 Medium
- linux kernelIn the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a...4.2 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by...4.0 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files,...9.0 Critical
- ibm cloud pak systemIBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
libxml2openSUSESecurity update for libxml2No scoreucode-intelopenSUSESecurity update for ucode-intelNo score- redhat zanataZanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging9.8 Critical
- review board board, fedoraproject fedora, reviewboard +2 moreReview Board: URL processing gives unauthorized users access to review lists4.3 Medium
- saltstackSaltStack RSA Key Generation allows remote users to decrypt communications8.1 High
- stanford webauth, debian linux +1 morewebauth before 4.6.1 has authentication credential disclosure7.5 High
- openshift cartridge cartridge, redhat openshift +1 moreOpenShift cartridge allows remote URL retrieval8.1 High
- katello, redhat satellite +1 moreKatello has multiple XSS issues in various entities5.4 Medium
libxml2openSUSE,python-libxml2-pythonopenSUSE +1 moreSecurity update for libxml2No score- mcafee, llc mcafee web advisor (wa), mcafee webadvisor +1 moreCode Injection vulnerability6.5 Medium
- mcafee, llc mcafee web advisor (wa), mcafee webadvisor +1 moreAPI Abuse Vulnerability6.5 Medium
- debian shadow, linux, fedoraproject fedora +4 more +6 moreshadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees4.7 Medium
- intelbras wrn 150 firmwareIntelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform...6.5 Medium
- hashicorp terraformUse of a Broken or Risky Cryptographic Algorithm in Terraform7.5 High
- kaspersky secure connection, kaspersky internet security, kaspersky total security, kaspersky security cloud, internet security, secure connection +2 more +4 moreKaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky...6.7 Medium
- redhat satellite, red hat satellite 6, satellite proxy v 5.6 +2 moreRhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite8.6 High
- freebsd, debian linux +1 moreFreeBSD: Input Validation Flaw allows local users to gain elevated privileges7.8 High
- piwigopiwigo has XSS in password.php (incomplete fix for CVE-2012-4525)6.1 Medium
- piwigopiwigo has XSS in password.php6.1 Medium
- mom, fedoraproject fedora +1 moremom creates world-writable pid files in /var/run7.8 High
- reviewboard, fedoraproject fedora +1 moreReviewBoard: has an access-control problem in REST API7.5 High
- dockerPath Traversal in Docker8.6 High
- inateck bcst-60 firmwareDue to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck...9.8 Critical
- Show moreLoading…