CVEs published November 9, 2019
29 CVEs were published on November 9, 2019: 0 critical, 2 high.
- Published
- 29
- Critical
- 0
- High
- 2
- Medium
- 9
- Low
- 1
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- NVIDIA GPU Display Driver
- 5
- IBM QRadar
- 4
- IBM Cognos Analytics
- 3
- NVIDIA VGPU Display Driver
- 3
- IBM Cognos Controller
- 2
- NVIDIA GeForce Experience
- 2
- alsa-driver
- 1
- IBM i
- 1
- IBM Qradar Advisor
- 1
- liboping
- 1
High 2
- CVE-2019-18840In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking.
- CVE-2018-1721IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.IBM Cognos Analytics
Medium, low and unrated 27
- CVE-2019-18845The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and writ
- CVE-2009-5004qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .qpid-cpp
- CVE-2009-4011dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, an
- CVE-2009-3614liboping 1.3.2 allows users reading arbitrary files upon the local system.liboping
- CVE-2009-3552In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization ManRHEV-M VDC
- CVE-2009-2802MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types.
- CVE-2009-0035alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usalsa-driver
- CVE-2019-5701NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with lNVIDIA GeForce Experience
- CVE-2019-5698NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin, in which an input index value is incorrectly validateNVIDIA VGPU Display Driver
- CVE-2019-5697NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which it may grant a guest access to memory that it does not own, whicNVIDIA VGPU Display Driver
- CVE-2019-5696NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which the provision of an incorrectly sized buffer by a guest VM leadsNVIDIA VGPU Display Driver
- CVE-2019-5694NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads WindoNVIDIA GPU Display Driver
- CVE-2019-5693NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) in which the program accesNVIDIA GPU Display Driver
- CVE-2019-5692NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape NVIDIA GPU Display Driver
- CVE-2019-4645IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.IBM Cognos Analytics
- CVE-2019-4581IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting.IBM QRadar
- CVE-2019-4556IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controIBM Qradar Advisor
- CVE-2019-4509IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtIBM QRadar
- CVE-2019-4470IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting.IBM QRadar
- CVE-2019-4454IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting.IBM QRadar
- CVE-2019-4450IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting.IBM i
- CVE-2019-4412IBM Cognos Controller stores sensitive information in URL parameters.IBM Cognos Controller
- CVE-2019-4411IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guIBM Cognos Controller
- CVE-2019-4334IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against IBM Cognos Analytics
- CVE-2019-5691NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape NVIDIA GPU Display Driver
- CVE-2019-5690NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape NVIDIA GPU Display Driver
- CVE-2019-5689NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability in the Downloader component in which a user with local sysNVIDIA GeForce Experience