CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- tree-kill project tree-killTreekill Enables OS Command Injection9.8 Critical
- tree-kill project tree-killCommand Injection in tree-kill9.8 Critical
- http server project server, oracle http server +1 moreCross-Site Scripting in http_server7.5 High
- sylabs singularitySingularity insecure permissions7.5 High
- wago pfc200, pfc 100 firmware, pfc 200 firmware +2 moreAn exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check"...9.1 Critical
- wago pfc200, pfc 100 firmware, pfc 200 firmware +2 moreAn exploitable stack buffer overflow vulnerability exists in the command line utility...9.8 Critical
- wago pfc200, pfc 100 firmware, pfc 200 firmware +2 moreAn exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check"...5.3 Medium
- gitlabAn improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to...6.5 Medium
- dell rsa identity governance and lifecycle, rsa identity governance & lifecycle +1 moreThe RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to...8.7 High
- dell rsa identity governance and lifecycle, rsa identity governance & lifecycle +1 moreThe RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to...8.3 High
- dell rsa identity governance and lifecycle, rsa identity governance & lifecycle +1 moreThe RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to...5.4 Medium
- wago pfc 200 firmware, pfc 100 firmware, pfc200 +2 moreAn exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check"...9.1 Critical
- wago pfc200, pfc 100 firmware, pfc 200 firmware +2 moreAn exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check"...9.8 Critical
- abb pb610 panel builder 600ABB PB610 HMIStudio accepts malicious DLL file in an application7.1 High
- abb pb610 panel builder 600PB610 HMISimulator provides interface with access to arbitrary files4.3 Medium
- abb pb610 panel builder 600ABB PB610 HMIStudio crashes after launching an empty *.JPR application file3.9 Low
- abb pb610 panel builder 600ABB PB610 HMISimulator does not check content-length of the HTTP request4.3 Medium
- wago pfc 200 firmware, pfc 100 firmware, pfc200 +2 moreAn exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec''...9.8 Critical
- wago pfc 100 firmware, pfc 200 firmware, pfc200 +2 moreAn exploitable denial-of-service vulnerability exists in the iocheckd service ??I/O-Chec??...9.1 Critical
- elastic kibanaKibana versions before 6.8.6 and 7.5.1 contain a cross site scripting (XSS) flaw in the...5.4 Medium
- hp universal internet of thingsSecurity vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and...7.5 High
- ge s2020 firmware, s2020g firmware +1 moreAn issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions...5.4 Medium
- wago pfc200, pfc 100 firmware, pfc 200 firmware +2 moreAn exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check''...9.8 Critical
- rack, fedoraproject fedora, opensuse leap +2 morePossible Information Leak / Session Hijack Vulnerability in Rack6.3 Medium
- humaxdigital hgb10r-02 firmwareAn issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin...7.5 High
- humaxdigital hgb10r-02 firmwareAn issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. The...7.5 High
- rockcarry ffjpegbitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to...6.5 Medium
- rockcarry ffjpegjfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.6.5 Medium
drupal/corePackagistThe Drupal project uses the third-party library Archive_Tar, which has released a security improvement that is needed to protect some Drupal configurations. Multiple vulnerabilities are possible if Dr…No score- trend micro mobile security for android (consumer), trendmicro mobile security +1 moreTrend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has...9.8 Critical
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreTrend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL...7.8 High
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreA privilege escalation vulnerability in Trend Micro HouseCall for Home Networks (versions below 5...7.8 High
drupal/corePackagistThe Media Library module has a security vulnerability whereby it doesn't sufficiently restrict access to media items in certain configurations.No score- talend restletAn XML eXternal Entity (XXE) issue exists in Restlet 1.1.10 in an endpoint using XML transport,...7.5 High
drupal/corePackagistDrupal 8 core's file_save_upload() function does not strip the leading and trailing dot ('.') from filenames, like Drupal 7 did. Users with the ability to upload files with any extension in conjunctio…No scoredrupal/corePackagistA visit to install.php can cause cached data to become corrupted. This could cause a site to be impaired until caches are rebuilt.No score- jboss as 7 jboss, redhat jboss application server, jboss enterprise application platform +2 moreAn Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper...7.8 High
- apple swiftnio ssl, swift-ubuntu +1 moreSwiftNIO SSL arbitrary code execution vulnerability9.8 Critical
- apple macos, mac os x +1 moreA validation issue was addressed with improved input sanitization. This issue is fixed in macOS...5.5 Medium
- apple ios, ipados, macos +4 more +6 moreAn authentication issue was addressed with improved state management. This issue is fixed in iOS...8.4 High
- apple ios, ipados, macos +4 more +6 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...5.5 Medium
- apple ios, ipados, macos +4 more +6 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...7.8 High
- apple ios, ipados, macos +4 more +6 moreA validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13...5.5 Medium
- apple ios, ipados, macos +4 more +6 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13...7.5 High
- apple ios, ipados, macos +4 more +6 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple xcodeA memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11...7.8 High
- apple macos, mac os x +1 moreA validation issue existed in the entitlement verification. This issue was addressed with...7.8 High
- apple ios, ipados, iphone os +2 moreAn inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in...5.7 Medium
- apple macos, mac os x +1 moreA validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15...7.8 High
- Show moreLoading…