CVEs published November 13, 2019
107 CVEs were published on November 13, 2019: 2 critical, 4 high.
- Published
- 107
- Critical
- 2
- High
- 4
- Medium
- 5
- Low
- 0
- Unrated
- 96
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- Android
- 24
- McAfee Advanced Threat Defense
- 7
- letodms
- 2
- offlineimap
- 2
- P30
- 2
- poppler
- 2
- SAP SE SAP BusinessObjects Business Intelligence Platform
- 2
- AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR…
- 1
- AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,A…
- 1
- CKSource CKEditor Drupal module
- 1
Critical 2
High 4
- CVE-2019-3661Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')McAfee Advanced Threat Defense
- CVE-2019-3660Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requestsMcAfee Advanced Threat Defense
- CVE-2019-3651Advanced Threat Defense (ATD) - Information Disclosure vulnerabilityMcAfee Advanced Threat Defense
- CVE-2019-18279In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated pr
Medium, low and unrated 101
- CVE-2019-3662Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerabilityMcAfee Advanced Threat Defense
- CVE-2019-18954Pomelo v2.2.5 allows external control of critical state data.pomelo
- CVE-2011-0544phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag.phpbb3
- CVE-2019-3650Advanced Threat Defense (ATD) - Information Disclosure vulnerabilityMcAfee Advanced Threat Defense
- CVE-2019-18952SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.
- CVE-2019-18951SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.
- CVE-2010-5108Trac 0.11.6 does not properly check workflow permissions before modifying a ticket.trac
- CVE-2019-3649Advanced Threat Defense (ATD) - Information Disclosure vulnerabilityMcAfee Advanced Threat Defense
- CVE-2019-3420All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability.ZXHN H108N
- CVE-2019-13555In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prMitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU:…
- CVE-2019-18240In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotelyFuji Electric V-Server 4.0.6 and prior
- CVE-2019-0386Order processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18) and S4HANA Sales (corrected inSAP SE SAP ERP Sales · SAP SE S4HANA Sales
- CVE-2019-0396SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficientSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2019-0388SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate SAP SE SAP UI
- CVE-2019-0391Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information whSAP SE SAP NetWeaver AS Java
- CVE-2019-0390Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise SAP SE SAP Data Hub
- CVE-2019-0393An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry ouSAP SE SAP Quality Management
- CVE-2019-0382A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pageSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2019-0389An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may changSAP SE SAP NetWeaver Application Server Java
- CVE-2019-0385SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabilSAP SE SAP Enable Now
- CVE-2013-3097Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router.
- CVE-2010-4817pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.pithos
- CVE-2010-4664In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found.consolekit
- CVE-2019-18923Insufficient content type validation of proxied resources in go-camo before 2.1.1 allows a remote attacker to serve arbitrary content from g
- CVE-2013-3366Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G
- CVE-2010-4661udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.udisks
- CVE-2011-4972hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackeCKSource CKEditor Drupal module
- CVE-2013-4275Cross-site scripting (XSS) vulnerability in the zen_breadcrumb function in template.php in the Zen theme 6.x-1.x, 7.x-3.x before 7.x-3.2, anZen theme
- CVE-2013-3367Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a
- CVE-2014-1214views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and e
- CVE-2012-5193Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbitrary web script or
- CVE-2019-17550The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS).
- CVE-2019-17515The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS).
- CVE-2010-4657PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2.php5
- CVE-2019-18837An issue was discovered in crun before 0.10.5.crun
- CVE-2019-18883XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.
- CVE-2019-18884index.php/team_members/add_team_member in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users.
- CVE-2019-9467In the Bootloader, there is a possible kernel command injection due to missing command sanitization.Android
- CVE-2019-2210In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2010-4654poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.poppler
- CVE-2013-3516NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the
- CVE-2019-18793Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.
- CVE-2010-4653An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.poppler
- CVE-2019-18844The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (in
- CVE-2012-2237Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbMahara
- CVE-2019-16951A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34.
- CVE-2010-4533offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flaofflineimap
- CVE-2019-16950An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.
- CVE-2013-3517Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.
- CVE-2019-2214In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-2213In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition.Android
- CVE-2019-2036In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check.Android
- CVE-2019-2198In Download Provider, there is a possible SQL injection vulnerability.Android
- CVE-2019-2196In Download Provider, there is possible SQL injection.Android
- CVE-2019-2209In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2019-2208In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bugAndroid
- CVE-2019-2212In poisson_distribution of random, there is an out of bounds read.Android
- CVE-2019-2207In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks.Android
- CVE-2019-2233In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error.Android
- CVE-2019-2206In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-2205In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free.Android
- CVE-2019-16949An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.
- CVE-2019-2204In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal.Android
- CVE-2019-2203In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2019-2202In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2019-2201In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-2197In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value.Android
- CVE-2019-2211In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection.Android
- CVE-2013-4657Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.
- CVE-2019-2199In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass.Android
- CVE-2019-2195In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input validation.Android
- CVE-2019-2193In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client.Android
- CVE-2019-2192In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation.Android
- CVE-2010-4532offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-thofflineimap
- CVE-2019-16948An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31.
- CVE-2019-5293Some Huawei products have a memory leak vulnerability when handling some messages.AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR…
- CVE-2019-5294There is an out of bound read vulnerability in some Huawei products.AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,A…
- CVE-2014-8167vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attackvdsm and vdsclient
- CVE-2019-5289Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the spManageOne
- CVE-2012-4385letodms 3.3.6 has CSRF via change passwordletodms
- CVE-2013-4654Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..
- CVE-2019-5292Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9.1.0.205(C00E97R1P9),Honor 10 Lite, Honor 8A, Huawei Y6
- CVE-2012-4384letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendarletodms
- CVE-2019-18929Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a do
- CVE-2019-18930Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a sta
- CVE-2014-3655JBoss KeyCloak is vulnerable to soft token deletion via CSRFJBoss KeyCloak · org.keycloak:keycloak-services
- CVE-2019-18931Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GE
- CVE-2014-3592OpenShift Origin: Improperly validated team names could allow stored XSS attacksOpenShift Origin
- CVE-2013-4655Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.
- CVE-2019-15948Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a b
- CVE-2019-5288P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient cheP30
- CVE-2013-4656Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service.
- CVE-2019-5287P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient cheP30
- CVE-2019-18839FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter.
- CVE-2019-17523An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parame
- CVE-2019-17524An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clie
- CVE-2019-18397A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacke
- CVE-2019-5282Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.Emily-AL00A, Emily-TL00B, Emily-L09C, Emily-L29C
- CVE-2019-5279Huawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461E2R1P11T8), Versions Emily-L29C
- CVE-2019-3641Exploitation of Authorization in TIE ServerMcAfee Threat Intelligence Exchange Server
- CVE-2019-3648Implicit loading of DLLsMcAfee Total Protection