CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...9.8 Critical
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...9.8 Critical
- siemens sppa-t3000 application serverA vulnerability has been identified in SPPA-T3000 Application Server (All versions). An attacker...8.8 High
- siemens sppa-t3000 application serverA vulnerability has been identified in SPPA-T3000 Application Server (All versions). The...5.3 Medium
- siemens sppa-t3000 application serverA vulnerability has been identified in SPPA-T3000 Application Server (All versions). The...5.3 Medium
- siemens sppa-t3000 application serverA vulnerability has been identified in SPPA-T3000 Application Server (All versions). The RMI...5.9 Medium
- siemens sppa-t3000 application serverA vulnerability has been identified in SPPA-T3000 Application Server (All versions). The...9.8 Critical
- siemens sppa-t3000 application serverA vulnerability has been identified in SPPA-T3000 Application Server (All versions). The...9.8 Critical
- siemens control center server (ccs), sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...4.9 Medium
- siemens en100 ethernet module dnp3 variant, en100 ethernet module iec 61850 variant, en100 ethernet module modbus tcp variant +7 more +9 moreA vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100...5.3 Medium
- siemens en100 ethernet module dnp3 variant, en100 ethernet module iec 61850 variant, en100 ethernet module modbus tcp variant +7 more +9 moreA vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100...6.1 Medium
- siemens en100 ethernet module dnp3 variant, en100 ethernet module iec 61850 variant, en100 ethernet module modbus tcp variant +7 more +9 moreA vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100...7.5 High
- siemens xhqA vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web application...9.1 Critical
- siemens xhqA vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could...5.4 Medium
- siemens xhqA vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could...8.1 High
- bitwarden serverThe Bitwarden server through 1.32.0 has a potentially unwanted KDF.7.5 High
- ibm db2 high performance unload load for luw, db2 high performance unload load +1 moreIBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute...7.4 High
- scoutnet kalenderThe Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS.5.4 Medium
- davical, debian linux +1 moreA reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter...9.3 Critical
- ea originElectronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).7.8 High
- ea originElectronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).7.8 High
- intesync solismedAn issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation...5.9 Medium
- intesync solismedIntesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE...9.8 Critical
- intesync solismedIntesync Solismed 3.3sp allows Insecure File Upload.9.8 Critical
- intesync solismedIntesync Solismed 3.3sp has XSS.6.1 Medium
- intesync solismedIntesync Solismed 3.3sp has CSRF.8.8 High
- intesync solismedIntesync Solismed 3.3sp has SQL Injection.9.8 Critical
- intesync solismedIntesync Solismed 3.3sp has Incorrect Access Control.9.8 Critical
- intesync solismedIntesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.9.8 Critical
- intesync solismedIntesync Solismed 3.3sp allows Clickjacking.4.3 Medium
- siemens simatic s7-1200 cpu family (incl. siplus variants), siemens ag simatic s7-1200 cpu family < v4.x (incl. siplus variants), simatic s7-1200 cpu family v4.x (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All...6.8 Medium
- siemens ag desigo px automation controllers pxc00-e.d, pxc50-e.d, pxc100-e.d, pxc200-e.d with desigo px web modules pxa40-w0, pxa40-w1, pxa40-w2, desigo px automation controllers pxc00-u, pxc64-u, pxc128-u with desigo px web modules pxa30-w0, pxa30-w1, pxa30-w2, desigo px automation controllers pxc22.1-e.d, pxc36-e.d, pxc36.1-e.d with activated web server +16 more +18 moreA vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D,...5.3 Medium
- redhat 3scaleA vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the...4.6 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, msm8998 firmware +17 more +19 moreCrafted image that has a valid signature from a non-QC entity can be loaded which can read/write...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +46 more +48 moreWhile Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +48 more +50 moreIncorrect length used while validating the qsee log buffer sent from HLOS which could then lead...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 morePossible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +11 more +13 moreHLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +33 more +35 moreOut of bound read would occur while trying to read action category and action ID without...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreOut of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a...7.8 High
- qualcomm, inc. snapdragon connectivity, qualcomm qca6390 firmware +1 moreDriver may access an invalid address while processing IO control due to lack of check of address...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +37 more +39 morePossible integer overflow while multiplying two integers of 32 bit in QDCM API of get display...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +39 more +41 moreSnapshot of IB can lead to invalid address access due to missing check for size in the related...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 moreAccessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +38 more +40 moreBuffer overflow can occur due to usage of wrong datatype and missing length check before copying...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, qualcomm qcs605 firmware, sdm670 firmware +4 more +6 moreNull pointer dereference issue in kernel due to missing check related to LLC support in GPU in...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreLack of check of data truncation on user supplied data in kernel leads to buffer overflow in...7.8 High
- Show moreLoading…