Search
Total
201818 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2019-2078 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-114749542 | |||||
| CVE-2019-2077 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-114745929 | |||||
| CVE-2019-2075 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115908308 | |||||
| CVE-2019-2076 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115907334 | |||||
| CVE-2019-9289 | 1 Google | 1 Android | 2019-10-01 | 2.1 LOW | 5.5 MEDIUM |
| In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79883824 | |||||
| CVE-2019-2074 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116617847 | |||||
| CVE-2019-2073 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117100484 | |||||
| CVE-2019-2072 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116117112 | |||||
| CVE-2019-2071 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117216549 | |||||
| CVE-2019-2070 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117883804 | |||||
| CVE-2019-2069 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117832864 | |||||
| CVE-2019-9291 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In Bluetooth, there is a possible remote code execution due to an improper memory allocation. This could lead to remote code execution in Bluetooth with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112159179 | |||||
| CVE-2019-2068 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117099943 | |||||
| CVE-2019-2067 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116114402 | |||||
| CVE-2019-2066 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117100617 | |||||
| CVE-2019-2065 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118143575 | |||||
| CVE-2019-9293 | 1 Google | 1 Android | 2019-10-01 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libstagefright, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117661116 | |||||
| CVE-2019-2064 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116469592 | |||||
| CVE-2019-9294 | 1 Google | 1 Android | 2019-10-01 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libstagefright, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111764444 | |||||
| CVE-2019-2062 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117660045 | |||||
| CVE-2019-2063 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116019594 | |||||
| CVE-2019-2061 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112610994 | |||||
| CVE-2019-2059 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118386824 | |||||
| CVE-2019-2055 | 1 Google | 1 Android | 2019-10-01 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113164693 | |||||
| CVE-2019-6446 | 2 Fedoraproject, Numpy | 2 Fedora, Numpy | 2019-10-01 | 7.5 HIGH | 9.8 CRITICAL |
| ** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources. | |||||
| CVE-2019-12493 | 1 Glyphandcog | 1 Xpdfreader | 2019-09-30 | 5.8 MEDIUM | 7.1 HIGH |
| A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4.01.01 because GfxSeparationColorSpace and GfxDeviceNColorSpace mishandle tint transform functions. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data. | |||||
| CVE-2019-15290 | 2019-09-30 | N/A | N/A | ||
| ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-15098. Reason: This candidate is a duplicate of CVE-2019-15098. Notes: All CVE users should reference CVE-2019-15098 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. | |||||
| CVE-2019-9370 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In sonivox, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-133880046 | |||||
| CVE-2019-9362 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libSACdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426980 | |||||
| CVE-2019-2139 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117610049 | |||||
| CVE-2019-9382 | 1 Google | 1 Android | 2019-09-30 | 6.8 MEDIUM | 8.8 HIGH |
| In libeffects, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120874654 | |||||
| CVE-2019-2138 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118494320 | |||||
| CVE-2019-9363 | 1 Google | 1 Android | 2019-09-30 | 6.8 MEDIUM | 8.8 HIGH |
| In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-123584306 | |||||
| CVE-2019-2144 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112856493 | |||||
| CVE-2019-2160 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112715795 | |||||
| CVE-2019-9424 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 7.5 HIGH |
| In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern can be ignored. Product: AndroidVersions: Android-10Android ID: A-110941092 | |||||
| CVE-2019-2159 | 1 Google | 1 Android | 2019-09-30 | 6.8 MEDIUM | 8.8 HIGH |
| In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112707186 | |||||
| CVE-2019-9319 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111762100 | |||||
| CVE-2019-9331 | 1 Google | 1 Android | 2019-09-30 | 5.0 MEDIUM | 7.5 HIGH |
| In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112272279 | |||||
| CVE-2019-2161 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112553431 | |||||
| CVE-2019-9317 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libstagefright, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052258 | |||||
| CVE-2019-2162 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112713720 | |||||
| CVE-2019-2079 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115509210 | |||||
| CVE-2019-2163 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118138797 | |||||
| CVE-2019-2164 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113263695 | |||||
| CVE-2019-2165 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112712154 | |||||
| CVE-2019-2060 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112709994 | |||||
| CVE-2018-17789 | 1 Prospecta | 1 Master Data Online | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| Prospecta Master Data Online (MDO) allows CSRF. | |||||
| CVE-2019-6812 | 1 Schneider-electric | 2 Bmx-nor-0200h, Bmx-nor-0200h Firmware | 2019-09-30 | 4.0 MEDIUM | 7.2 HIGH |
| A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confidentiality issue when using FTP protocol. | |||||
| CVE-2019-9366 | 1 Google | 1 Android | 2019-09-30 | 4.3 MEDIUM | 6.5 MEDIUM |
| In libSBRdec there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112052062 | |||||