CVEs published December 24, 2019
21 CVEs were published on December 24, 2019: 1 critical, 1 high. 1 is now in CISA KEV.
- Published
- 21
- Critical
- 1
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- mongo-express
- 1
- NVIDIA GeForce Experience
- 1
- Reliable Controls MACH-ProWebCom/Sys
- 1
- Trend Micro Antivirus for Mac
- 1
Critical 1
High 1
Medium, low and unrated 19
- CVE-2019-19960In wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks.
- CVE-2019-19962wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography.
- CVE-2019-19963An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled.
- CVE-2019-19958In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an
- CVE-2019-19957In libIEC61850 1.4.0, getNumberOfElements in mms/iso_mms/server/mms_access_result.c has an out-of-bounds read vulnerability, related to bufP
- CVE-2019-5702NVIDIA GeForce Experience, all versions prior to 3.20.2, contains a vulnerability when GameStream is enabled in which an attacker with localNVIDIA GeForce Experience
- CVE-2019-19925zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
- CVE-2019-19924SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c.
- CVE-2019-19923flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side i
- CVE-2019-18249Reliable Controls MACH-ProWebCom/Sys, all versions prior to 2.15 (Firmware versions prior to 8.26.4), may allow attacker to execute commandsReliable Controls MACH-ProWebCom/Sys
- CVE-2019-19954Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmi
- CVE-2017-16778An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency
- CVE-2019-19695A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below) could potentially allow an attacker to creaTrend Micro Antivirus for Mac
- CVE-2019-19948In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
- CVE-2019-19950In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c.
- CVE-2019-19951In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c.
- CVE-2019-19953In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.
- CVE-2019-19952In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
- CVE-2019-19949In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_wri