CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- backdropcms backdrop cmsAn issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't...4.8 Medium
- backdropcms backdrop cmsAn issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows...7.2 High
- backdropcms backdrop cmsAn issue was discovered in Backdrop CMS 1.14.x before 1.14.2. It doesn't sufficiently filter...4.8 Medium
- backdropcms backdrop cmsAn issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't...4.8 Medium
- atlassian confluence, confluence server +1 moreThere was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in...6.5 Medium
- sonicwall sonicos, sonicos sslvpn nacagent +1 moreInstallation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value...7.8 High
- sonicwall sma100, sma 100 firmware +1 moreCode injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in...8.8 High
- sonicwall sma100, sma 100 firmware +1 moreBuffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in...8.8 High
- sonicwall sma100, sma 100 firmware +1 moreAuthenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to...6.5 Medium
- sonicwall sma100, sma 100 firmware +1 moreIn SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the...7.5 High
- sonicwall sma100, sma 100 firmware +1 moreStack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute...9.8 Critical
- kopano groupware coreHrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of...9.8 Critical
- pebbletemplates pebble templatesPebble Templates Improper Input Validation vulnerability9.8 Critical
- pronestor plannerAn issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local...8.2 High
- opera, opera software as for android +1 moreOpera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass...5.5 Medium
- intel converged security management engine firmwareInsufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10...6.7 Medium
- intel active management technology firmwareInsufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an...6.8 Medium
- intel converged security management engine firmware, trusted execution engine firmware +1 moreAuthentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22...6.7 Medium
- f5 big-ip 10000s firmware, big-ip 10050s firmware, big-ip 10150v-n firmware +31 more +33 moreLogic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04...4.4 Medium
- intel active management technology firmwareInsufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow...9.8 Critical
- intel converged security management engine firmware, trusted execution engine firmware +1 moreInsufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0...6.7 Medium
- intel dynamic application loader, trusted execution engine firmware +1 moreInsufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70,...4.4 Medium
- intel active management technology firmwareInsufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70...4.6 Medium
- intel converged security management engine firmware, trusted execution engine firmware +1 moreInsufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11...4.4 Medium
- intel converged security management engine firmware, trusted execution engine firmware +1 moreInsufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11...6.7 Medium
- intel converged security management engine firmware, trusted execution engine firmware +1 moreInsufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45...4.4 Medium
- intel active management technology firmwareInsufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70...7.5 High
- intel converged security management engine firmwareInsufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10...4.4 Medium
- intel platform trust technology firmware, server platform services firmware, trusted execution engine firmware +2 moreCryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11...5.9 Medium
- intel active management technology firmwareInsufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11...8.1 High
- intel converged security management engine firmwareInsufficient input validation in firmware update software for Intel(R) CSME before versions 12.0...7.8 High
- intel trusted execution engine firmwareImproper directory permissions in the installer for Intel(R) Management Engine Consumer Driver...7.8 High
- intel converged security management engine firmware, trusted execution engine firmware +1 moreInsufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11...7.8 High
- intel active management technology firmwareLogic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45...9.8 Critical
- intel active management technology firmwareInsufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11...8.8 High
- intel converged security management engine firmwareLogic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow...6.7 Medium
- intel intel-sa-00125 detection tool, sa-00086 detection tool, converged security management engine firmware +1 more +3 moreInsufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME...7.8 High
- intel active management technology firmwareCross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and...8.4 High
- intel converged security management engine firmware, trusted execution engine firmware +1 moreHeap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45;...8.8 High
- zohocorp manageengine adselfservice plusAn open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before...6.1 Medium
- gitlab, gitlab ce/ee +1 moreAn improper access control vulnerability exists in Gitlab <v12.3.2, <v12.2.6, <v12.1.12 which...8.8 High
- gitlab, gitlab ee +1 moreAn improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that...5.3 Medium
- gitlab, gitlab ce/ee +1 moreA command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an...7.5 High
- gitlab, gitlab ce/ee +1 moreAn information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12...7.5 High
- gitlab, gitlab ce/ee +1 moreAn information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12...4.3 Medium
- gitlabAn IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading...6.5 Medium
- gitlabAn information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when...6.5 Medium
- hackerone statics-serverPath Traversal in statics-server7.5 High
- node-df project node-dfCommand Injection in node-df9.8 Critical
- gitlab, gitlab ce/ee +1 moreA authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in...8.8 High
- Show moreLoading…