CVEs published November 29, 2019
33 CVEs were published on November 29, 2019: 0 critical, 4 high.
- Published
- 33
- Critical
- 0
- High
- 4
- Medium
- 3
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Red Hat kernel
- 3
- CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRou…
- 2
- GNU Libgcrypt · GnuPG
- 2
- P20
- 2
- P30, P30 Pro, Mate 20, HiSuite
- 2
- [UNKNOWN] grub2
- 1
- Atlas 300, Atlas
- 1
- HiSuite, HwBackup
- 1
- Honor play
- 1
- Huawei Band 2, Honor Band
- 1
High 4
- CVE-2019-167662FA bypass in Wagtail through new device pathLab Digital wagtail-2fa · wagtail-2fa
- CVE-2019-19378In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/
- CVE-2019-14901A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.Red Hat kernel
- CVE-2019-14895A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.Red Hat kernel
Medium, low and unrated 29
- CVE-2019-19451When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an en
- CVE-2015-0837The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timinGNU Libgcrypt · GnuPG
- CVE-2019-19396illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple threads calling sendmsg
- CVE-2014-3591Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximGNU Libgcrypt · GnuPG
- CVE-2015-2060cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute d
- CVE-2015-1855verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does noRuby
- CVE-2015-3406The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be t
- CVE-2019-5309Honor play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) have an information disclosure vulnerability in certain Huawei .Honor play
- CVE-2019-5271There is an information leak vulnerability in Huawei smart speaker Myna.Myna
- CVE-2019-5308Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability.Mate 20 RS
- CVE-2019-5247Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability.Atlas 300, Atlas
- CVE-2019-5268Some Huawei home routers have an input validation vulnerability.CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRou…
- CVE-2019-5269Some Huawei home routers have an improper authorization vulnerability.CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRou…
- CVE-2019-5218There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3.Huawei Band 2, Honor Band
- CVE-2019-5211The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability.P20
- CVE-2019-5232There is a use of insufficiently random values vulnerability in Huawei ViewPoint products.VP9630, VP9650, VP9660
- CVE-2019-5212There is an improper access control vulnerability in Huawei Share.P20
- CVE-2019-5210Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions earlier than 9.1.1.175(C00E170R3P2) have anNova 5i pro, Nova
- CVE-2019-5227P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00P30, P30 Pro, Mate 20, HiSuite
- CVE-2019-5263HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 haveHiSuite, HwBackup
- CVE-2019-5224P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of bounds read vulnerability.P30
- CVE-2019-5225P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00P30, Mate 20, P30 Pro
- CVE-2019-5226P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00P30, P30 Pro, Mate 20, HiSuite
- CVE-2019-18922A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated
- CVE-2019-16767In EzMaster before 5.2.11 docker containers were executed with advanced privileges by defaultInist-CNRS ezmaster
- CVE-2019-19377In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-fr
- CVE-2019-19391In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrar
- CVE-2019-14897A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver.Red Hat kernel
- CVE-2019-14865A flaw was found in the grub2-set-bootflag utility of grub2.[UNKNOWN] grub2