CVEs published June 14, 2019
45 CVEs were published on June 14, 2019: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 45
- Critical
- 0
- High
- 0
- Medium
- 5
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 12
- Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- 7
- Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- 5
- Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- 3
- Facebook WhatsApp for Android · Facebook WhatsApp Business…
- 2
- Atlassian Sourcetree for Windows
- 1
- Facebook WhatsApp for Android · Facebook WhatsApp Busine… +3
- 1
- Facebook WhatsApp for iOS · Facebook WhatsApp Business for…
- 1
- IBM Connections
- 1
- IBM i
- 1
Medium, low and unrated 45
- CVE-2019-12828An issue was discovered in Electronic Arts Origin before 10.5.39.
- CVE-2019-9842madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL…
- CVE-2019-0316SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently…SAP SE SAP NetWeaver Process Integration
- CVE-2019-0303SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appService.jsp is…SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2018-20655When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow.Facebook WhatsApp for iOS · Facebook WhatsApp Business for…
- CVE-2018-6339When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in.Facebook WhatsApp for Android · Facebook WhatsApp Business…
- CVE-2018-6349When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based…Facebook WhatsApp for Android · Facebook WhatsApp Business…
- CVE-2018-6350An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers.Facebook WhatsApp for Android · Facebook WhatsApp Busine… +3
- CVE-2018-13919Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in…Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-3583A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity…Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-5883Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-5903Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-5911Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-5913A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2255An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2256An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2257Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2019-2259Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2017-8252Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11819Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-11929Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-11934Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-11939Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-11942Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-11947The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer…Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
Show all 45 entriesShow fewer entries
- CVE-2018-11955Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in…Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-13898Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13901Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2018-13902Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13906The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13907While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13908Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13909Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13910Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2018-13911Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-4403IBM Connections 6.0 is vulnerable to cross-site scripting.IBM Connections
- CVE-2019-4381IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection…IBM i
- CVE-2019-4239IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a…MQ Advanced Cloud Pak
- CVE-2019-10126A flaw was found in the Linux kernel.kernel
- CVE-2019-11582An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote…Atlassian Sourcetree for Windows
- CVE-2019-11770In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of…The Eclipse Foundation Eclipse Buildship
- CVE-2019-10159cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the…Red Hat cfme
- CVE-2019-12822In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds…
- CVE-2019-12819An issue was discovered in the Linux kernel before 5.0.
- CVE-2019-12818An issue was discovered in the Linux kernel before 4.20.15.