CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- signal signal-desktopSignal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a...7.3 High
- fermax outdoor panel firmwareAn access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical...4.6 Medium
ghostpclMageiaUpdated ghostpcl packages fix security vulnerabilitiesNo score- trend micro antivirus for mac, trendmicro antivirus +1 moreA privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below)...7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage...9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and...9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function...9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the...9.1 Critical
- imagemagickIn ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of...9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage...9.1 Critical
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB...4.6 Medium
- open tftp server project tftp serverStack-based overflow vulnerability in the logMess function in Open TFTP Server SP 1.66 and...9.8 Critical
- open tftp server project tftp serverStack-based overflow vulnerability in the logMess function in Open TFTP Server MT 1.65 and...9.8 Critical
- open tftp server project tftp serverFormat string vulnerability in the logMess function in TFTP Server MT 1.65 and earlier allows...9.8 Critical
- open tftp server project tftp serverFormat string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows...9.8 Critical
- open tftp server project tftp serverHeap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to...9.8 Critical
- orckestra c1 cmsAn issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in...8.8 High
- sonicwall email security applianceA vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform...9.8 Critical
- sonicwall email security applianceWeak default password cause vulnerability in SonicWall Email Security appliance which leads to...9.8 Critical
- abcprintf upload-image-with-ajaxDue to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be...9.8 Critical
- we-con plc editorMultiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129...7.8 High
- vmware horizon view agent, workstation +1 moreVMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5...7.8 High
- forcepoint ngfw security management center, next generation firewall security management center +1 moreForcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare...5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreAn exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3....7.4 High
- mz-automation libiec61850In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read,...6.5 Medium
- equinoxce control expertEquinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an...9.8 Critical
- check point endpoint security client for windows, checkpoint endpoint security clients +1 moreA denial of service vulnerability was reported in Check Point Endpoint Security Client for...7.5 High
- zte zxcloud goldendata vapAll versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems...9.8 Critical
- zte zxcloud goldendata vapAll versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information...4.9 Medium
- zte zxcloud goldendata vapAll versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading...5.3 Medium
- f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 moreOn BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11...5.5 Medium
- f5 big-ip, big-iq, big-ip access policy manager +13 more +15 moreOn BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1...4.3 Medium
- huawei p30, p30 firmware +1 moreHuawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control...7.5 High
- huawei elle-al00b, elle-al00b firmware +1 moreHuawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer...8.8 High
- huawei p30 firmware, share function p30 +1 moreHuawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input...7.5 High
- f5 big-ip asm, big-ip application security manager +1 moreOn versions 15.0.0-15.0.1.1, the BIG-IP ASM Cloud Security Services profile uses a built-in...7.4 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11...4.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1...7.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5,...7.5 High
- huawei oceanstor sns3096, oceanstor sns3096 firmware +1 moreHuawei OceanStor SNS3096 V100R002C01 have an information disclosure vulnerability. Attackers with...5.5 Medium
- f5 big-ip, big-ip local traffic manager +1 moreOn BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic...5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreInsufficiently Protected Credentials in Apache Tomcat7.0 High
- f5 big-ip, big-ip local traffic manager +1 moreOn BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP versions 15.0.0-15.0.1, 14.1.0.2-14.1.2.2, 14.0.0.5-14.0.1, 13.1.1.5-13.1.3.1, 12.1.4.1...3.3 Low
- f5 big-ip virtual edition, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, the TMM...5.3 Medium
- f5 big-ip asm, big-ip application security manager +1 moreOn versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP...7.5 High
- Show moreLoading…