CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- keepkey firmwareInsufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before...9.8 Critical
- jbossas4 as, redhat jboss community application server, jboss enterprise web server +2 moreAn issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores...3.3 Low
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_645.3 Medium
- polarssl, debian linux, fedoraproject fedora +2 moreA Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak...7.4 High
- weidmueller ie-sw-pl08m-6tx-2sc firmware, ie-sw-pl08m-6tx-2scs firmware, ie-sw-pl08m-6tx-2st firmware +37 more +39 moreAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build...9.8 Critical
- weidmueller ie-sw-pl08m-6tx-2sc firmware, ie-sw-pl08m-6tx-2scs firmware, ie-sw-pl08m-6tx-2st firmware +37 more +39 moreAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build...7.5 High
- weidmueller ie-sw-pl08m-6tx-2sc firmware, ie-sw-pl08m-6tx-2scs firmware, ie-sw-pl08m-6tx-2st firmware +37 more +39 moreAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build...9.8 Critical
- weidmueller ie-sw-pl08m-6tx-2sc firmware, ie-sw-pl08m-6tx-2scs firmware, ie-sw-pl08m-6tx-2st firmware +37 more +39 moreAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build...6.5 Medium
- weidmueller ie-sw-pl08m-6tx-2sc firmware, ie-sw-pl08m-6tx-2scs firmware, ie-sw-pl08m-6tx-2st firmware +37 more +39 moreAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build...9.8 Critical
- titool printmonitorThe username parameter of the TITool PrintMonitor solution during the login request is vulnerable...9.8 Critical
- sitevisionSiteVision 4 has Incorrect Access Control.8.8 High
- sitevisionSiteVision 4 allows Remote Code Execution.8.8 High
- canonical ubuntu cobbler, cobbler +1 moreA Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu...5.9 Medium
- dell red cloak windows agentIn SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of...3.3 Low
- fedoraproject fedora, sectool +1 moreA Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.7.8 High
- cesnet libyang, fedoraproject fedora, redhat enterprise linux +2 moreIn all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way...8.1 High
- cesnet libyang, redhat enterprise linux +1 moreIn all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way...8.1 High
- ros sros2SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating...7.5 High
- ros sros2SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless...7.5 High
- amazon audibleThe Audible application through 2.34.0 for Android has Missing SSL Certificate Validation,...5.9 Medium
- sangoma freepbxIn userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management...4.8 Medium
- sangoma freepbxIn userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management...4.8 Medium
- opencv, redhat enterprise linux +1 moreOut-of-bounds Read in OpenCV6.5 Medium
- red hat ansible, debian linux, opensuse backports sle +5 more +7 moreInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible5.7 Medium
- openslp, vmware esxi, horizon daas +14 more +16 moreOpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has...9.8 Critical
- documizeCross-site Scripting in Documize6.1 Medium
- phpmyadmin, debian linux +1 morephpMyAdmin unsanitized Git information9.8 Critical
- xtivia web time and expenseAn Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense ...4.3 Medium
- apache struts, libstruts1.2-java +1 moreUnrestricted Upload of File with Dangerous Type in Apache Struts28.8 High
- ldap-account-manager ldap account manager (lam) pro, ldap account manager, debian linux +1 more +3 moreA Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the...6.1 Medium
- ldap-account-manager ldap account manager (lam), ldap account manager, debian linux +1 more +3 moreA Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the...6.1 Medium
- syliusInternal exception message exposure for login action in Sylius3.5 Low
- strapiDuplicate Advisory: OS Command Injection in Strapi7.2 High
- puma, debian linux +1 morePotential DOS attack in Puma5.3 Medium
- verizon serialize-javascriptAffected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)4.2 Medium
- line armeriaImproper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in Armeria4.8 Medium
- jasig project php-pear-cas, apereo phpcas, debian linux +1 more +3 moreAn Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in...5.5 Medium
- apereo phpcas, debian linux +1 moreA Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to...5.3 Medium
- amd radeon 550 firmware, radeon rx 550 firmware, vmware workstation +2 moreAn exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20...8.6 High
- norton password managerNorton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue,...6.5 Medium
- norton password managerNorton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing ...6.3 Medium
- norton password managerNorton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing ...6.3 Medium
- aviatrix vpn clientWeak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on...7.8 High
- aviatrix vpn clientAn authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an...7.8 High
- qnap music stationThis cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject...4.8 Medium
- qnap video stationThis cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject...4.8 Medium
- qnap qtsThis improper link resolution vulnerability allows remote attackers to access system files. To...9.8 Critical
- qnap photo stationThis external control of file name or path vulnerability allows remote attackers to access or...9.8 Critical
- qnap photo stationThis external control of file name or path vulnerability allows remote attackers to access or...9.8 Critical
- qnap qtsThis improper input validation vulnerability allows remote attackers to inject arbitrary code to...9.8 Critical
- Show moreLoading…