CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreOut of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreInsufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a...8.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreBuffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...8.8 High
- yachtcontrolYachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an...9.8 Critical
thunderbirdUbuntuthunderbird regressionNo score- jetbrains ktorURL Redirection to Untrusted Site (Open Redirect) in Ktor6.1 Medium
- modoboa modoboa-dmarcModoboa is vulnerable to an XML External Entity Injection (XXE)7.5 High
- openbsd, debian linux, dietlibc +2 morelib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.9.8 Critical
- lenovo power management driverA potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1...4.4 Medium
- lenovo energy management driver, energy management +1 moreA denial of service vulnerability has been reported in Lenovo Energy Management Driver for...7.5 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +1 more +3 moreA remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes...8.8 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +2 more +4 moreA tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive...7.5 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +1 more +3 moreA remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes...8.8 High
- mozilla firefoxMozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service (crash),...6.5 Medium
- erlang erlang\/otpinets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not...6.1 Medium
- ibm websphere application serverIBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting. This...5.4 Medium
- ibm cloud pak systemPlatform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A...7.0 High
- ibm smartcloud analytics, smartcloud analytics log analysis +1 moreIBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized...9.1 Critical
- ibm cloud pak systemIBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an...5.3 Medium
- yaws, debian linux +1 moreyaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and...6.1 Medium
- katelloKatello has a Denial of Service vulnerability in API OAuth authentication7.5 High
- monkeyMonkey HTTP Daemon has local security bypass7.1 High
- last.fm desktopThe Last.fm desktop app (Last.fm Scrobbler) through 2.1.39 on macOS makes HTTP requests that...5.3 Medium
- openstack python-keystoneclient, debian linux, redhat openstack +2 moreInsufficient Verification of Data Authenticity in python-keystoneclient9.8 Critical
- openstack python-keystoneclient, debian linux, fedoraproject fedora +1 more +3 moreInadequate Encryption Strength in python-keystoneclient9.8 Critical
- monkeyMonkey HTTP Daemon: broken user name authentication9.8 Critical
- openshift-origin-controller project openshift-origin-controller, rubygem-openshift-origin-controller +1 moreRubyGem openshift-origin-controller is vulnerable to command injection9.8 Critical
- redhat openstack, openstack-utils openstack-db program, redhat openstack essex +2 moreopenstack-utils openstack-db has insecure password creation7.5 High
- ovirt nodeoVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation7.8 High
- jboss keycloak keycloak, redhat jboss keycloak +1 moreJBoss KeyCloak Cross-site Scripting Vulnerability6.1 Medium
postgresqlSUSESecurity update for postgresqlNo score- libwav project libwavmarc-q libwav through 2017-04-20 has a NULL pointer dereference in wav_content_read() at libwav.c.6.5 Medium
- libssh, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0...7.1 High
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...5.4 Medium
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...5.3 Medium
- gitAn issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2,...8.8 High
- git-for-windows git, opensuse leap +1 moreCVE-2019-1353 does not affect BellSoft software9.8 Critical
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +1 more +3 moreA remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes...8.8 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +1 more +3 moreA remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes...8.8 High
- git-for-windows git, opensuse leap +1 moreCVE-2019-1348 does not affect BellSoft software3.3 Low
- intel core i3-1000g1 firmware, core i3-1000g4 firmware, core i3-1005g1 firmware +261 more +263 moreImproper conditions check in voltage settings for some Intel(R) Processors may allow an...6.7 Medium
- data\ \, debian linux, libdata-uuid-perl +2 morePerl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks5.5 Medium
- ibm datapower gatewayIBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a default...8.1 High
- ibm planning analyticsIBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal....6.3 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm watson assistant for ibm cloud pak for dataIBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site...5.4 Medium
- pyradpyrad uses sequential packet IDs4.3 Medium
- broadcom nolio, ca technologies, a broadcom company release automation +1 moreAn unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the...9.8 Critical
- samsung m2m1shot driverStack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot...7.8 High
- Show moreLoading…