CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- accentis content resource management systemSQL injection vulnerability in Accentis Content Resource Management System before the October...8.8 High
- accentis content resource management systemCross-site scripting (XSS) vulnerability in Accentis Content Resource Management System before...6.1 Medium
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ security 2020 +3 more +5 moreTrend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer...9.8 Critical
- monopdOff-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9...7.5 High
- sqlite, apache guacamole, netapp cloud backup +6 more +8 moreSQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...7.5 High
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morepragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...9.8 Critical
- symantec industrial control system protection, symantec corporation industrial control system protection (icsp) +1 moreSymantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an...6.5 Medium
- openstack keystoneOpenStack Keystone Credential Leakage8.8 High
- nopcommercenopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop...4.8 Medium
- nopcommercenopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin...8.8 High
- nopcommerceRoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can...8.8 High
- nopcommerceRoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f...9.1 Critical
- temenos t24An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript...7.5 High
- xpand-it xray test mangaementIn "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can...5.4 Medium
- xpand-it xray test mangaementIn "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can...5.4 Medium
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morealter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...5.5 Medium
- virustotal yara, fedoraproject fedora +1 moreOut-of-bounds read in YARA7.8 High
- radare radare2, fedoraproject fedora +1 moreradare2 through 4.0.0 lacks validation of the content variable in the function...7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen running, the updater service wrote status and log files to an unrestricted location;...7.8 High
- google chromeInappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote...6.5 Medium
- supermicro x8sti-f bios, x8sti-f firmware +1 moreOn SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media...8.8 High
- saitoha libsixelAn issue was discovered in libsixel 1.8.2. There is an integer overflow in the function...9.8 Critical
- saitoha libsixelAn issue was discovered in libsixel 1.8.2. There is an integer overflow in the function...9.8 Critical
- saitoha libsixelAn issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function...9.8 Critical
- saitoha libsixelAn issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function...9.8 Critical
- htmldoc project htmldoc, debian linux, fedoraproject fedora +2 moreHTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when...7.8 High
- linux kernelIn the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreIn the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some...7.8 High
- linux kernel, netapp active iq unified manager, cloud backup +4 more +6 moreIn the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations,...7.8 High
- commenthol serialize-to-jsregular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js3.1 Low
- safer-eval project safer-evalSandbox Breakout / Arbitrary Code Execution in safer-eval9.8 Critical
- google androidIn Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input...4.4 Medium
- google androidIn nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible...7.5 High
- google androidIn updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a...5.5 Medium
- google androidIn array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check...5.5 Medium
- google androidIn DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This...6.5 Medium
- google androidIn device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper...5.5 Medium
- google androidWhen pairing with a Bluetooth device, it may be possible to pair a malicious device without any...8.8 High
- google androidIn ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing...7.8 High
- google androidn ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to...7.8 High
- google androidIn hasActivityInVisibleTask of WindowProcessController.java there?s a possible bypass of user...7.8 High
- google androidIn System UI, there is a possible bypass of user's consent for access to sensor data due to a...4.7 Medium
- google androidIn various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and...5.5 Medium
- google androidIn handleRun of TextLine.java, there is a possible application crash due to improper input...7.5 High
- google androidIn checkOperation of AppOpsService.java, there is a possible bypass of user interaction...5.5 Medium
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible improper permission...7.8 High
- google androidIn setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free...7.8 High
- dell command\|configure, command configure (dcc) +1 moreDell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability....7.1 High
- cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 moreUAA logs all query parameters with debug logging level8.8 High
- shapeshift keepkey firmwareInsufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before...7.5 High
- Show moreLoading…