CVEs published July 22, 2019
36 CVEs were published on July 22, 2019: 1 critical, 4 high.
- Published
- 36
- Critical
- 1
- High
- 4
- Medium
- 3
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 9
- IBM Spectrum Protect
- 2
- Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- 2
- Cherokee Webserver Latest Cherokee Web server
- 1
- Frog CMS
- 1
- IBM QRadar SIEM
- 1
- Ilias
- 1
- juniper/libslax
- 1
- OFFIS.de DCMTK
- 1
- Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- 1
Critical 1
High 4
- CVE-2019-12327Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet.
- CVE-2019-12326Missing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50.0.6.156 allows an attacker to upload a man
- CVE-2019-12325The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, whic
- CVE-2019-12324A command injection (missing input validation) issue in the IP address field for the logging server in the configuration web interface on th
Medium, low and unrated 31
- CVE-2019-12552In SweetScape 010 Editor 9.0.1, an integer overflow during the initialization of variables could allow an attacker to cause a denial of serv
- CVE-2019-12551In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the Memcpy function (provided by the scri
- CVE-2019-3414All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability.ZTE OTCP
- CVE-2019-1010218Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120.Cherokee Webserver Latest Cherokee Web server
- CVE-2019-1010220tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read.tcpdump.org tcpdump
- CVE-2019-1010228OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.OFFIS.de DCMTK
- CVE-2019-13096TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage.
- CVE-2019-13097The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutab
- CVE-2019-13098The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called.
- CVE-2019-13099The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-roo
- CVE-2019-13100The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows
- CVE-2019-1010232Juniper juniper/libslax libslax latest version (as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018) is affected byjuniper/libslax
- CVE-2019-1010234The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation.The Linux Foundation ONOS
- CVE-2019-1010235Frog CMS 1.1 is affected by: Cross Site Scripting (XSS).Frog CMS
- CVE-2019-1010237Ilias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79 Type 2: Stored XSS (or Persistent).Ilias
- CVE-2019-9959The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflo
- CVE-2018-13924Lack of check to prevent the buffer length taking negative values can lead to stack overflow.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13927Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2243Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2260A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2261Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2264Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon MobiQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2019-2269Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon AutQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2277Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2279Shared memory gets updated with invalid data and may lead to access beyond the allocated memory.Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2019-2287Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2292Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon CQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-13896XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-4267The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow.IBM Spectrum Protect
- CVE-2019-4236A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACLIBM Spectrum Protect
- CVE-2018-2024IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modifiedIBM QRadar SIEM