Latest CVE Feed
-
5.5
MEDIUMCVE-2019-5716
In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.... Read more
- Published: Jan. 08, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5671
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software does not release a resource after its effective lifetime has ended, which may lead to denial of service.... Read more
- Published: Feb. 27, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5593
Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6... Read more
Affected Products : fortios- Published: Jan. 23, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-20195
A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as critical. This issue affects some unknown processing of the file request.php. The manipulation of the argument phone leads to sql injection.... Read more
Affected Products :- Published: Oct. 29, 2024
- Modified: Oct. 29, 2024
-
5.5
MEDIUMCVE-2019-5507
SnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information.... Read more
Affected Products : snapmanager- Published: Oct. 09, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5431
This vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions 3.0 to 3.4.0 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In th... Read more
Affected Products : twitter_kit- Published: May. 06, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2001-1559
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference.... Read more
Affected Products : openbsd- Published: Dec. 31, 2001
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2019-5279
Huawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461E2R1P11T8), Versions earlier than 9.1.0.316(C635E2R1P11T8), Versions earlier than 9.1.0.311(C185E2R1P12T8), Versions earlier than 9.1.0.... Read more
- Published: Nov. 13, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5244
Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and t... Read more
- Published: Jun. 04, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5257
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability. An attacker who logs in to the board may send crafted messages from the internal n... Read more
- Published: Dec. 13, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5239
Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have an information leak vulnerability. Successful exploitation may cause the attacker to read information.... Read more
- Published: Aug. 08, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5230
P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D NEO-AL00 9.1.0.321(C786E320R1P1T8) have an improper validati... Read more
- Published: Nov. 13, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5224
P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of bounds read vulnerability. The system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user t... Read more
- Published: Nov. 29, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5222
There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker tricks the user to in... Read more
- Published: Jul. 17, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5256
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a null pointer dereference vul... Read more
- Published: Dec. 13, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5258
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerabilit... Read more
- Published: Dec. 13, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5182
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache f... Read more
- Published: Mar. 11, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5176
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache f... Read more
- Published: Mar. 12, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5106
A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempti... Read more
Affected Products : e\!cockpit- Published: Mar. 11, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-5005
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause corru... Read more
- Published: Jan. 03, 2019
- Modified: Nov. 21, 2024