CVEs published June 14, 2019
45 CVEs were published on June 14, 2019: 0 critical, 0 high.
- Published
- 45
- Critical
- 0
- High
- 0
- Medium
- 5
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 12
- Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- 7
- Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- 5
- Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- 3
- Facebook WhatsApp for Android · Facebook WhatsApp Business…
- 2
- Atlassian Sourcetree for Windows
- 1
- Facebook WhatsApp for Android · Facebook WhatsApp Busine… +3
- 1
- Facebook WhatsApp for iOS · Facebook WhatsApp Business for…
- 1
- IBM Connections
- 1
- IBM i
- 1
Medium, low and unrated 45
- CVE-2019-12828An issue was discovered in Electronic Arts Origin before 10.5.39.
- CVE-2019-9842madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, becau
- CVE-2019-0316SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently validaSAP SE SAP NetWeaver Process Integration
- CVE-2019-0303SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appService.jsp is reflecting SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2018-20655When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow.Facebook WhatsApp for iOS · Facebook WhatsApp Business for…
- CVE-2018-6339When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in.Facebook WhatsApp for Android · Facebook WhatsApp Business…
- CVE-2018-6349When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflFacebook WhatsApp for Android · Facebook WhatsApp Business…
- CVE-2018-6350An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers.Facebook WhatsApp for Android · Facebook WhatsApp Busine… +3
- CVE-2018-13919Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in SnaQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-3583A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, SnapQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-5883Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, SnapdraQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-5903Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, SnaQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-5911Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, SnapdragonQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-5913A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2255An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2256An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2257Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon ConsumerQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2019-2259Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon Compute,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2017-8252Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11819Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustrQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-11929Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-11934Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon ConsumerQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-11939Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustrQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-11942Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-11947The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer ElectrQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-11955Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-13898Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics ConneQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13901Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, SnQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2018-13902Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in SnapQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13906The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application messagQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13907While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13908Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon ComQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13909Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13910Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon ConsQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2018-13911Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-4403IBM Connections 6.0 is vulnerable to cross-site scripting.IBM Connections
- CVE-2019-4381IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection uIBM i
- CVE-2019-4239IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a locaMQ Advanced Cloud Pak
- CVE-2019-10126A flaw was found in the Linux kernel.kernel
- CVE-2019-11582An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackAtlassian Sourcetree for Windows
- CVE-2019-11770In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of HTTPThe Eclipse Foundation Eclipse Buildship
- CVE-2019-10159cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration Red Hat cfme
- CVE-2019-12822In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds me
- CVE-2019-12819An issue was discovered in the Linux kernel before 5.0.
- CVE-2019-12818An issue was discovered in the Linux kernel before 4.20.15.