CVEs published in December 2019
1,536 vulnerabilities, 253 critical, 19 exploited.
- upx, fedoraproject fedora +1 moreA heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted...5.5 Medium
- saitoha libsixelAn invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before...6.5 Medium
- saitoha libsixelA heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel...6.5 Medium
- saitoha libsixelA memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.6.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...6.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in...8.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...6.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...6.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.8.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...6.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in...8.8 High
- belkin n900 firmwareBelkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging".9.8 Critical
- archerysec archeryIn Archery before 1.3, inserting an XSS payload into a project name (either by creating a new...5.4 Medium
- belkin f5d8236-4 firmwareAn authentication bypass exists in the web management interface in Belkin F5D8236-4 v2.9.8 Critical
- ezxml project ezxmlAn issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a...6.5 Medium
- ezxml project ezxmlAn issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a...7.5 High
- ezxml project ezxmlAn issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing...6.5 Medium
- automattic w3 super cache, super cache plugin cache plugin +1 moreWordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which...8.8 High
- feature project feature, features +1 moreFeatures file injection vulnerability5.4 Medium
- oracle jdk, java-1.7.0-openjdk +1 moreAn information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation...7.5 High
- ircd-ratboxircd-ratbox 3.0.9 mishandles the MONITOR command which allows remote attackers to cause a denial...7.5 High
- jetbrains ktorImproper Neutralization of Input During Web Page Generation (Cross-site Scripting) in Ktor5.4 Medium
- fedoraproject sssdA flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the...8.8 High
- gnome networkmanager, canonical ubuntu linux, debian linux +2 more +4 moreIn NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in...4.4 Medium
- huawei usg9500, usg9500 firmware +1 moreUSG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a...7.5 High
- linux kernelA locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79...5.5 Medium
- huawei usg9500, usg9500 firmware +1 moreUSG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a...7.5 High
- huawei usg9500, usg9500 firmware +1 moreUSG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a...7.5 High
- huawei usg9500, usg9500 firmware +1 moreUSG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability....4.9 Medium
- huawei m5 lite 10, m5 lite 10 firmware +1 moreM5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability....9.8 Critical
- intelbras iwr 3000n firmwareAn issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows...7.5 High
- intelbras iwr 3000n firmwareA CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of...8.8 High
- dlink dir-601 firmwareD-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for...9.8 Critical
- dlink dir-601 firmwareD-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote...8.8 High
- wordpress, debian linux +1 moreStored cross-site scripting (XSS) in WordPress block editor5.8 Medium
- wordpress, debian linux +1 moreStored cross-site scripting (XSS) in WordPress block editor5.8 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...5.3 Medium
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling in Waitress: Invalid whitespace characters in headers7.1 High
waitressPyPIHTTP Request Smuggling: Invalid whitespace characters in headers in WaitressNo score- artica pandora fmsPandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who...8.8 High
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered...7.2 High
- verison media athenzAthenz vulnerable to Open Redirect6.1 Medium
- appleple a-blog cmsa-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 ...6.1 Medium
- appleple a-blog cmsCross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver...6.1 Medium
- nippon television network corporation ntv news24, ntv news 24 +1 moreThe NTV News24 prior to Ver.3.0.0 does not verify X.509 certificates from SSL servers, which...7.4 High
- dayz kinzaCross-site scripting vulnerability in KINZA for Windows version 5.9.2 and earlier and for Mac...6.1 Medium
- andrei lupu custom body class, custom body class project body class +1 moreCross-site request forgery (CSRF) vulnerability in Custom Body Class 0.6.0 and earlier allows...8.8 High
- andrei lupu custom body class, custom body class project body class +1 moreCross-site scripting vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers...6.1 Medium
- wp spell check spell check, wpspellcheck +1 moreCross-site request forgery (CSRF) vulnerability in WP Spell Check 7.1.9 and earlier allows remote...8.8 High
- motex lanscope an, lanscope cat client program, lanscope cat detection agent +2 more +4 morePrivilege escalation vulnerability in Multiple MOTEX products (LanScope Cat client program (MR)...7.8 High
- Show moreLoading…