CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- contaoUnrestricted file uploads in Contao8.8 High
- contaoInsert tag injection in the Contao login module5.3 Medium
- contaoInformation disclosure in the Contao backend5.3 Medium
- simplifile recordfusionIn Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote...7.5 High
- barco clickshare button r9861500d01 firmwareBarco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure (issue 2 of 2...5.9 Medium
- barco clickshare button r9861500d01 firmwareBarco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management....8.1 High
- barco clickshare button r9861500d01 firmwareBarco ClickShare Button R9861500D01 devices before 1.9.0 have Missing Support for Integrity Check...7.8 High
- barco clickshare cs-100 huddle firmware, clickshare cse-200 firmware +1 moreBarco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have...7.5 High
- barco clickshare button r9861500d01 firmwareBarco ClickShare Button R9861500D01 devices before 1.9.0 have Missing Support for Integrity Check...6.6 Medium
- linux kernel, [unknown] linux kernel, redhat enterprise linux +2 moreA flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5...5.5 Medium
nodejs-nodemonAlmaLinux,nodejs-packagingAlmaLinux +1 morenodejs:12 bug fix updateNo scorelibiscsiAlmaLinux,libiscsi-develAlmaLinux,libiscsi-utilsAlmaLinux +5 more +7 morevirt:rhel bug fix updateNo scorepython2-scourAlmaLinuxinkscape:0.92.3 bug fix updateNo score- linux kernelIn the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations...5.5 Medium
- linux kernelIn the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause...7.8 High
- atlassian application linksThe ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1...4.3 Medium
- atlassian crowdVarious resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow...6.5 Medium
- No product listedEmail header injection in Address objectsNo score
- drupal views dynamic fieldThe Views Dynamic Fields module through 7.x-1.0-alpha4 for Drupal makes insecure unserialize...8.1 High
- apache supersetUsers able to query database metadata in Apache Superset5.3 Medium
- apache supersetUsers can view database names in Apache Superset5.3 Medium
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +9 more +11 moreThere is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S...6.5 Medium
- puppet serverPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Medium
- trend micro deep security as a serviceA privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup...8.8 High
- solarwinds serv-u ftp serverA stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP...5.4 Medium
- solarwinds serv-u ftp serverA CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.6.5 Medium
- google tensorflowHeap buffer overflow in `UnsortedSegmentSum` in TensorFlow2.6 Low
- gonitro nitro free pdf readerThe JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a...5.5 Medium
- gonitro nitropdfThe JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a...5.5 Medium
- kyrol internet securityAn invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet...7.8 High
- gonitro nitro free pdf readerThe JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a...5.5 Medium
- dell cpg bios, xps 7390 firmware +1 moreSettings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration...7.6 High
- yarnpkg yarnYarn Improper link resolution before file access (Link Following)7.8 High
- excon, debian linux, opensuse backports sle +1 more +3 moreIn RubyGem excon, interrupted Persistent Connections May Leak Response Data5.8 Medium
- omron plc cj firmware, plc cs firmware, plc nj firmware +2 moreIn Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series,...9.8 Critical
- omron plc cj firmware, plc cs firmware +1 moreIn Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could...8.1 High
- omron plc cj series, plc cs series, plc nx1p2 series +2 more +4 moreIn Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, the software...9.8 Critical
- omron plc cj firmware, plc cs firmware +1 moreIn Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could...9.8 Critical
- intel dynamic platform and thermal frameworkImproper permissions in the Intel(R) Dynamic Platform and Thermal Framework v8.3.10208.5643 and...7.8 High
- intel administrative tools for intel network adaptersInsufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters...7.8 High
- intel ethernet i218 adapter driverInsufficient memory protection for Intel(R) Ethernet I218 Adapter driver for Windows* 10 before...5.5 Medium
- intel field programmable gate array software development kit for openclImproper conditions check in the Linux kernel driver for the Intel(R) FPGA SDK for OpenCL(TM) Pro...5.5 Medium
- intel rapid storage technologyImproper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an...7.8 High
- intel cd1iv128mk firmware, cd1m3128mk firmware, cd1p64gk firmware +16 more +18 moreOut of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially...6.7 Medium
- intel cd1iv128mk firmware, cd1m3128mk firmware, cd1p64gk firmware +16 more +18 moreInteger overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially...6.7 Medium
- intel cd1iv128mk firmware, cd1m3128mk firmware, cd1p64gk firmware +16 more +18 moreImproper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to...6.7 Medium
- intel cd1iv128mk firmware, cd1m3128mk firmware, cd1p64gk firmware +16 more +18 moreImproper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to...7.8 High
- intel cd1iv128mk firmware, cd1m3128mk firmware, cd1p64gk firmware +16 more +18 moreImproper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to...7.8 High
- Show moreLoading…