CVEs published December 13, 2019
59 CVEs were published on December 13, 2019: 0 critical, 3 high.
- Published
- 59
- Critical
- 0
- High
- 3
- Medium
- 1
- Low
- 0
- Unrated
- 55
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700…
- 5
- npm cli · npm
- 3
- AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;A…
- 1
- CampusInsight
- 1
- CFME
- 1
- CloudEngine
- 1
- CloudUSM-EUA
- 1
- duplicity
- 1
- E5572-855
- 1
- github.com/miekg/dns
- 1
High 3
Medium, low and unrated 56
- CVE-2019-5252There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro).Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro
- CVE-2019-5235Some Huawei smart phones have a null pointer dereference vulnerability.Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B, Harry-LGRP1-…
- CVE-2019-5264There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;ChangxiaMate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxi…
- CVE-2019-5277Huawei CloudUSM-EUA V600R006C10;V600R019C00 have an information leak vulnerability.CloudUSM-EUA
- CVE-2019-5254Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS80AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700…
- CVE-2019-5255Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS80AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700…
- CVE-2019-5256Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS80AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700…
- CVE-2019-5258Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS80AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700…
- CVE-2019-5257Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a reAP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700…
- CVE-2019-19796Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file.
- CVE-2019-19795samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file.
- CVE-2019-5260Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability.HUAWEI Y9 2019;Honor View
- CVE-2019-19794The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because mathgithub.com/miekg/dns
- CVE-2019-5278There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019CampusInsight
- CVE-2019-5253E5572-855 with versions earlier than 8.0.1.3(H335SP1C233) has an improper authentication vulnerability.E5572-855
- CVE-2019-16736A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 al
- CVE-2019-16735A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows
- CVE-2019-17364The processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers t
- CVE-2019-16730processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbit
- CVE-2019-16733processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitr
- CVE-2019-16737The processCommandSetMac() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to e
- CVE-2019-16731The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades a
- CVE-2019-16734Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execu
- CVE-2019-16732Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the
- CVE-2019-19774An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110.
- CVE-2019-17123The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as
- CVE-2019-19793In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges.
- CVE-2019-19790Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .
- CVE-2019-19722In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because o
- CVE-2019-14344TemaTres 3.0 has reflected XSS via the replace_string or search_string parameter to the vocab/admin.php?doAdmin=bulkReplace URI.
- CVE-2019-4426The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scriptiIBM Business Automation Workflow · IBM Case Manager
- CVE-2019-19785ATasm 1.06 has a stack-based buffer overflow in the to_comma() function in asm.c via a crafted .m65 file.
- CVE-2019-19786ATasm 1.06 has a stack-based buffer overflow in the parse_expr() function in setparse.c via a crafted .m65 file.
- CVE-2019-19787ATasm 1.06 has a stack-based buffer overflow in the get_signed_expression() function in setparse.c via a crafted .m65 file.
- CVE-2019-5290Huawei S5700 and S6700 have a DoS security vulnerability.S5700;S6700
- CVE-2019-5248CloudEngine 12800 has a DoS vulnerability.CloudEngine
- CVE-2019-5291Some Huawei products have an insufficient verification of data authenticity vulnerability.AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;A…
- CVE-2019-5251There is a path traversal vulnerability in several Huawei smartphones.Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor
- CVE-2019-5250Mate 20 Pro smartphones with versions earlier than 9.1.0.135(C00E133R3P1) have an improper authorization vulnerability.Mate 20 Pro
- CVE-2019-19397There is a weak algorithm vulnerability in some Huawei products.S12700;S1700;S2700;S5700;S6700;S7700;S9700
- CVE-2019-17599The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS).
- CVE-2014-3495duplicity 0.6.24 has improper verification of SSL certificatesduplicity
- CVE-2014-2387Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities
- CVE-2014-1867suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code executionsuphp
- CVE-2014-0241rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readablerubygem-hammer_cli_foreman
- CVE-2014-0212qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descriptorsqpid-cpp
- CVE-2014-0197CFME: CSRF protection vulnerability via permissive check of the referrer headerCFME
- CVE-2014-0175mcollective has a default password set at installmcollective
- CVE-2019-19501VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe.
- CVE-2019-18838An issue was discovered in Envoy 1.12.0.
- CVE-2019-18802An issue was discovered in Envoy 1.12.0.
- CVE-2019-18801An issue was discovered in Envoy 1.12.0.
- CVE-2019-13347An issue was discovered in the SAML Single Sign On (SSO) plugin for several Atlassian products affecting versions 3.1.0 through 3.2.2 for Ji
- CVE-2019-19782The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server.
- CVE-2019-19778An issue was discovered in libsixel 1.8.2.
- CVE-2019-19777stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.