Archive
21 November 2019
Vulnerabilities first published on this day (UTC), newest first.
106 results · Feed
-
High 7.5
Arbitrary File Write in iobroker.js-controller
An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administrative web panel with a request for an adapter file. **Note:** The attacker has to…
-
High 8.8
An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm bi…
-
High 7.5
An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm bi…
-
Unscored —
All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully e…
-
Unscored —
ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerabi…
-
Unscored —CVE-2018-8879 EPSS 17%
Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0…
-
Medium 6.5
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attack…
KEV Jun 25, 2025 -
Unscored —
An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root pr…
-
Unscored —
Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle wi…
-
Unscored —
A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read s…
-
Unscored —CVE-2019-16340 EPSS 19%
Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for…
-
Unscored —
Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon A…
-
Unscored —
Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon A…
-
Unscored —
While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon A…
-
Unscored —
Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consum…
-
Unscored —
Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Con…
-
Unscored —
If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cau…
-
Unscored —
Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in S…
-
Unscored —
SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdra…
-
Unscored —
While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non se…
-
Unscored —
Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, S…
-
Unscored —
Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values …
-
Unscored —
Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon …
-
Unscored —
Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application…
-
Unscored —
Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Sna…
-
Unscored —
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-com…
-
Unscored —
Low privilege users can access service configuration which contains registry data that admins uses to create or delete …
-
Unscored —
Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve …
-
Unscored —
Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to ou…
-
Unscored —
Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdrago…
-
Unscored —
Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snap…
-
Unscored —
Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate s…
-
Unscored —
Buffer over-read can occur in fast message handler due to improper input validation while processing a message from fir…
-
Unscored —
Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while ite…
-
Unscored —
Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall …
-
Unscored —
eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data
-
Medium 5.5
Link Following in rply
python-rply before 0.7.4 insecurely creates temporary files.
-
Unscored —
Gamera before 3.4.1 insecurely creates temporary files.
-
Unscored —
-
Unscored —
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.