CVEs published November 25, 2019
154 CVEs were published on November 25, 2019: 0 critical, 6 high. 2 are now in CISA KEV.
- Published
- 154
- Critical
- 0
- High
- 6
- Medium
- 11
- Low
- 0
- Unrated
- 137
- Now in CISA KEV
- 2
- Fix available
- 110
Most affected products
- Google Chrome
- 98
- libuser
- 2
- [UNKNOWN] infinispan · org.infinispan:infinispan-core
- 1
- ABB Power Generation Information Manager (PGIM) and Plant C…
- 1
- apt
- 1
- Claws Mail vCalendar plugin
- 1
- Cloud Foundry UAA Release
- 1
- cloud-init
- 1
- containers/image · github.com/containers/image
- 1
- cri-o
- 1
High 6
- CVE-2019-11290Cloud Foundry UAA logs query parameters in tomcat access fileCloud Foundry UAA Release
- CVE-2019-16765If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension actgithub vscode-codeql
- CVE-2019-13720Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2019-13721Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2019-14815A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.Linux kernel
- CVE-2019-10174A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application cl[UNKNOWN] infinispan · org.infinispan:infinispan-core
Medium, low and unrated 148
- CVE-2011-3596Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.polipo
- CVE-2011-3584The TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input.TYPO3 Core wec_discussion
- CVE-2019-18251In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS.Omron CX-Supervisor
- CVE-2019-18241In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server runningPhilips IntelliBridge EC40 and EC80
- CVE-2011-3583It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could TYPO3 Core · typo3/cms
- CVE-2019-15595A privilege escalation exists in UniFi Video Controller =<3.10.6 that would allow an attacker on the local machine to run arbitrary commandsUniFi Video Server
- CVE-2019-18250In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bABB Power Generation Information Manager (PGIM) and Plant C…
- CVE-2011-3374It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-thapt
- CVE-2011-3373Drupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has haddrupal6-views_bulk_operations
- CVE-2019-10771Characters in the GET url path are not properly escaped and can be reflected in the server response.iobroker.web
- CVE-2011-3355evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folevolution-data-server3
- CVE-2019-17632In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response conteThe Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:je…
- CVE-2011-3351openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi iopenvas-scanner
- CVE-2019-15629Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAG_MISUSE vulnerability that could be exploited to alTrend Micro Password Manager for Android
- CVE-2019-5825Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption viGoogle Chrome
- CVE-2019-5826Use after free in IndexedDB in Google Chrome prior to 73.0.3683.86 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2019-19244sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDE
- CVE-2012-6639An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance dcloud-init
- CVE-2019-19252vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af7
- CVE-2019-16764PowAssent is susceptible to denial of service attackspow-auth pow_assent
- CVE-2011-4924Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and zope2, zope3 · zope +1
- CVE-2019-4406IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client IBM Spectrum Protect Backup-Archive Client
- CVE-2018-2025IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIIBM Spectrum Protect Backup-Archive Client · IBM Spectrum P…
- CVE-2019-19249Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations.
- CVE-2019-19250OpenTrade before 2019-11-23 allows SQL injection, related to server/modules/api/v1.js and server/utils.js.
- CVE-2019-18374Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, whSymantec Critical System Protection
- CVE-2019-19246Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
- CVE-2019-15684Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remoKaspersky Protection extension for Google Chrome
- CVE-2015-1396A Directory Traversal vulnerability exists in the GNU patch before 2.7.4.
- CVE-2019-19242SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
- CVE-2019-10217A flaw was found in ansible 2.8.0 before 2.8.4.Red Hat Ansible · ansible
- CVE-2019-17406Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743
- CVE-2019-17405Nokia IMPACT < 18A: has Reflected self XSS
- CVE-2019-17404Nokia IMPACT < 18A: allows full path disclosure
- CVE-2019-17403Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution.
- CVE-2012-5644libuser has information disclosure when moving user's home directorylibuser
- CVE-2019-5878Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HGoogle Chrome
- CVE-2019-5879Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a mGoogle Chrome
- CVE-2019-5880Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crGoogle Chrome
- CVE-2019-5881Out of bounds read in SwiftShader in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to obtain potentially sensitive informatiGoogle Chrome
- CVE-2019-5872Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2019-5873Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents oGoogle Chrome
- CVE-2019-5874Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrGoogle Chrome
- CVE-2019-5875Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the OmniGoogle Chrome
- CVE-2019-5876Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption vGoogle Chrome
- CVE-2019-5877Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruGoogle Chrome
- CVE-2019-5851Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2019-5852Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to obtain potentially sensitive Google Chrome
- CVE-2019-5853Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corrGoogle Chrome
- CVE-2019-5854Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2019-5855Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2019-5856Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the rendererGoogle Chrome
- CVE-2019-5857Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit object coGoogle Chrome
- CVE-2019-5858Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitGoogle Chrome
- CVE-2019-5859Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrGoogle Chrome
- CVE-2019-5860Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2019-5861Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy viGoogle Chrome
- CVE-2019-5862Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2019-5864Insufficient data validation in CORS in Google Chrome prior to 76.0.3809.87 allowed an attacker who convinced a user to install a malicious Google Chrome
- CVE-2019-5865Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2019-5866Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corrGoogle Chrome
- CVE-2019-5867Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption viGoogle Chrome
- CVE-2019-5868Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2019-5869Use after free in Blink in Google Chrome prior to 76.0.3809.132 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2019-5870Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a craftGoogle Chrome
- CVE-2019-5871Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a cGoogle Chrome
- CVE-2019-13705Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a mGoogle Chrome
- CVE-2019-13706Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruptioGoogle Chrome
- CVE-2019-13707Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak filGoogle Chrome
- CVE-2019-13708Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of Google Chrome
- CVE-2019-13709Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictionGoogle Chrome
- CVE-2019-13710Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download Google Chrome
- CVE-2019-13711Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data viaGoogle Chrome
- CVE-2019-13713Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data viaGoogle Chrome
- CVE-2019-13714Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to iGoogle Chrome
- CVE-2019-13715Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoGoogle Chrome
- CVE-2019-13716Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation resGoogle Chrome
- CVE-2019-13717Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a craftedGoogle Chrome
- CVE-2019-13718Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN Google Chrome
- CVE-2019-13719Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a craftedGoogle Chrome
- CVE-2019-13723Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process toGoogle Chrome
- CVE-2019-13724Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2019-5842Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2019-5847Inappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corGoogle Chrome
- CVE-2019-5848Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive informGoogle Chrome
- CVE-2019-5849Out of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to obtain potentially sensitive information fromGoogle Chrome
- CVE-2019-5850Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2019-13679Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a craftGoogle Chrome
- CVE-2019-13680Inappropriate implementation in TLS in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof client IP address to websites Google Chrome
- CVE-2019-13681Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass download restrictions vGoogle Chrome
- CVE-2019-13682Insufficient policy enforcement in external protocol handling in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass samGoogle Chrome
- CVE-2019-13683Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin datGoogle Chrome
- CVE-2019-13684Inappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a Google Chrome
- CVE-2019-13685Use after free in sharing view in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via aGoogle Chrome
- CVE-2019-13686Use after free in offline mode in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via aGoogle Chrome
- CVE-2019-13687Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2019-13688Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2019-13691Insufficient validation of untrusted input in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the conteGoogle Chrome
- CVE-2019-13692Insufficient policy enforcement in reader mode in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass site isolation viaGoogle Chrome
- CVE-2019-13693Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to exGoogle Chrome
- CVE-2019-13694Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2019-13695Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption Google Chrome
- CVE-2019-13696Use after free in JavaScript in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a Google Chrome
- CVE-2019-13697Insufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to leak cross-origin dGoogle Chrome
- CVE-2019-13698Out of bounds memory access in JavaScript in Google Chrome prior to 73.0.3683.103 allowed a remote attacker to potentially exploit heap corrGoogle Chrome
- CVE-2019-13699Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2019-13700Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2019-13701Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the OmniboxGoogle Chrome
- CVE-2019-13702Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege esGoogle Chrome
- CVE-2019-13703Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contGoogle Chrome
- CVE-2019-13704Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security poGoogle Chrome
- CVE-2019-13659IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via aGoogle Chrome
- CVE-2019-13660UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.Google Chrome
- CVE-2019-13661UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.Google Chrome
- CVE-2019-13662Insufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security pGoogle Chrome
- CVE-2019-13663IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via aGoogle Chrome
- CVE-2019-13664Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass content security policy Google Chrome
- CVE-2019-13665Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple file download protectionGoogle Chrome
- CVE-2019-13666Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML paGoogle Chrome
- CVE-2019-13667Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of theGoogle Chrome
- CVE-2019-13668Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin datGoogle Chrome
- CVE-2019-13669Incorrect data validation in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the OmniboGoogle Chrome
- CVE-2019-13670Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corrGoogle Chrome
- CVE-2019-13671UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a crafted HTML page.Google Chrome
- CVE-2019-13673Insufficient data validation in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data vGoogle Chrome
- CVE-2019-13674IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via IDN homographs via aGoogle Chrome
- CVE-2019-13675Insufficient data validation in extensions in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to disable extensions via a crafGoogle Chrome
- CVE-2019-13676Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via Google Chrome
- CVE-2019-13677Insufficient policy enforcement in site isolation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass site isolation Google Chrome
- CVE-2019-13678Incorrect data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a craGoogle Chrome
- CVE-2019-10213OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operatorRed Hat openshift
- CVE-2012-5640thttpd has a local DoS vulnerability via specially-crafted .htpasswd filesthttpd
- CVE-2012-5631ipa 3.0 does not properly check server identity before sending credential containing cookiesipa
- CVE-2012-5630libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.libuser
- CVE-2019-10207A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x.Red Hat kernel
- CVE-2019-18675The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c becau
- CVE-2012-5617gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalationgksu-polkit
- CVE-2012-5582opendnssec misuses libcurl APIopendnssec
- CVE-2012-5527Claws Mail vCalendar plugin: credentials exposed on interfaceClaws Mail vCalendar plugin
- CVE-2012-5521quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removalquagga
- CVE-2012-5535gnome-system-log polkit policy allows arbitrary files on the system to be readgnome-system-log
- CVE-2012-5518vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificatvdsm
- CVE-2012-5578Python keyring has insecure permissions on new databases allowing world-readable files to be createdPython keyring · keyring
- CVE-2019-14822A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus oibus
- CVE-2019-10214The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in Opencontainers/image · github.com/containers/image
- CVE-2019-14891A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup.cri-o
- CVE-2019-10224A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3.Red Hat 389-ds-base
- CVE-2019-14825A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9.Red Hat katello · katello