CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- intel setup and configuration software platform discovery utilityImproper permissions in the installer for the Intel(R) SCS Platform Discovery Utility, all...7.8 High
- intel quartus primeImproper permissions in the installer for the License Server software for Intel? Quartus? Prime...7.8 High
- intel quartus primeNull pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition...5.5 Medium
- intel control center-iUnquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated...7.8 High
- dlink dir-615 t1 firmwareOn D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link...6.5 Medium
- roxyfileman roxy filemanRoxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded...7.5 High
- barco clickshare cs-100 firmware, clickshare cse-200\+ firmware, clickshare cse-200 firmware +1 more +3 moreBarco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure. The...5.3 Medium
- barco clickshare cs-100 firmware, clickshare cse-200\+ firmware, clickshare cse-200 firmware +1 more +3 moreBarco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded...9.8 Critical
- barco clickshare cs-100 firmware, clickshare cse-200\+ firmware, clickshare cse-200 firmware +1 more +3 moreBarco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected...6.8 Medium
- barco clickshare cs-100 firmware, clickshare cse-200\+ firmware, clickshare cse-200 firmware +1 more +3 moreOn Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is...5.9 Medium
- barco clickshare cs-100 firmware, clickshare cse-200\+ firmware, clickshare cse-200 firmware +1 more +3 moreBarco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate...9.8 Critical
- maxum rumpusA Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager...6.1 Medium
- ibm mq, mq appliance +1 moreIBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of...5.3 Medium
- ibm api connectIBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not...5.1 Medium
- cyrus imap, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8...6.5 Medium
- cz.nic knot-resolver, debian linux, nic knot resolver +2 moreknot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU...7.5 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous...7.8 High
- requests-kerberos project requests-kerberos, debian linux +1 moreImproper Authentication in requests-kerberos9.8 Critical
- imagemagick, debian linux +1 moreimagemagick 6.8.9.6 has remote DOS via infinite loop6.5 Medium
- debian linux, zend framework, zendframework +2 moreZF2014-03 has a potential cross site scripting vector in multiple view helpers6.1 Medium
- edeploy, redhat jboss enterprise web server +1 moreeDeploy has tmp file race condition flaws8.1 High
- edeploy, redhat jboss enterprise web server +1 moreeDeploy has RCE via cPickle deserialization of untrusted data9.8 Critical
- jboss keycloak keycloakJBoss KeyCloak Open Redirect6.1 Medium
- eclipse foundation jerseyjersey: XXE via parameter entities7.5 High
- cfme (cloudforms management engine) (cloudforms management engine), redhat cloudforms management engine +1 moreCFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during...5.5 Medium
- xfig project fig2dev, debian linux, fedoraproject fedora +2 moreread_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.5.5 Medium
postgresqlopenSUSESecurity update for postgresqlNo score- linux kernel, redhat enterprise linux +1 moreAn out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in...6.1 Medium
- huawei enjoy 8 plus firmware, honor 8x firmware, honor 9 lite firmware +3 more +5 moreThere is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9...3.5 Low
- huawei alp-al00b firmware, alp-tl00b firmware, bla-al00b firmware +47 more +49 moreSome Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts...5.3 Medium
- huawei changxiang 7s firmware, changxiang 8 plus firmware, honor 9 lite firmware +7 more +9 moreThere is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10...4.6 Medium
- huawei cloudusm-eua firmwareHuawei CloudUSM-EUA V600R006C10;V600R019C00 have an information leak vulnerability. Due to...7.5 High
- huawei ap2000 firmware, espace u1981 firmware, ips firmware +14 more +16 moreCertain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600...8.6 High
- huawei ap2000 firmware, espace u1981 firmware, ips firmware +14 more +16 moreCertain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600...5.5 Medium
- huawei ap2000 firmware, espace u1981 firmware, ips firmware +14 more +16 moreCertain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600...5.5 Medium
- huawei ap2000 firmware, espace u1981 firmware, ips firmware +14 more +16 moreCertain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600...5.5 Medium
- huawei ap2000 firmware, espace u1981 firmware, ips firmware +14 more +16 moreCertain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600...5.5 Medium
- yabasicYabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC...7.8 High
- samurai project samuraisamurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file.7.8 High
- huawei view 20 firmware, y9 2019 firmware +1 moreHuawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due...6.5 Medium
- miekg-dns project miekg-dnsmiekg/dns insecurely generates random numbers5.9 Medium
- huawei campusinsightThere is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100...6.5 Medium
- huawei e5572-855 firmwareE5572-855 with versions earlier than 8.0.1.3(H335SP1C233) has an improper authentication...5.9 Medium
- petwant pf-103 firmware, skymee petalk ai firmware +1 moreA stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103...9.8 Critical
- petwant pf-103 firmware, skymee petalk ai firmware +1 moreA stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103...9.8 Critical
- petwant pf-103 firmware, skymee petalk ai firmware +1 moreThe processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and...9.8 Critical
- petwant pf-103 firmware, skymee petalk ai firmware +1 moreprocessCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2...9.8 Critical
- petwant pf-103 firmware, skymee petalk ai firmware +1 moreprocessCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2...9.8 Critical
- petwant pf-103 firmware, skymee petalk ai firmware +1 moreThe processCommandSetMac() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and...9.8 Critical
- petwant pf-103 firmware, skymee petalk ai firmware +1 moreThe udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows...7.5 High
- Show moreLoading…