آسیب‌پذیری‌های حیاتی هفته دوم آذرماه

نوع آسیب‌پذیری

محصول آسیب‌پذیر

شناسه آسیب‌پذیری

Use-after-free

Firefox - SFTKSession objec

CVE-2019-11756

Use-after-free

Firefox - worker destruction

CVE-2019-17008

Stack corruption

Firefox - due to incorrect number of arguments in WebRTC code

CVE-2019-13722

Out of bounds write

Firefox - in NSS when encrypting with a block cipher

CVE-2019-11745

privilege escalation

Django save()‎

CVE-2019-19118

privilege escalation

Kaspersky Secure Connection

CVE-2019-15689

privilege escalation

Trend Micro Security 2020 DLL Loader

CVE-2019-15628

privilege escalation

Dell Command Configure Symlink

CVE-2019-18575

remote code execution

VMware ESXi and Horizon DaaS updates address OpenSLP

CVE-2019-5544

remote code execution

IBM Cloud Pak System File Upload

CVE-2019-4130

memory corruption

Linux Kernel serial_ir.c serial_ir_init_module()‎

CVE-2019-19543

memory corruption

Linux Kernel internal.h fpregs_state_valid

CVE-2019-19602

Interface Code Injection

McAfee Web Advisor Web

CVE-2019-3665

privilege escalation

McAfee Web Advisor Web Interface

CVE-2019-3666

privilege escalation

mod_fcgid

CVE-2016-1000104

External Entity

Apache Olingo Deserialization XML

CVE-2019-17554

privilege escalation

Apache Olingo Public API AbstractService

CVE-2019-17556

Code Execution

Apache Struts XSLT File

CVE-2012-1592

privilege escalation

Adobe Stock API multi_upload.php

CVE-2019-19594

privilege escalation

Adobe Stock API upload.php

CVE-2019-19595

memory corruption

AMD Driver Pixel Shader ATIDXX64.DLL

CVE-2019-5098

Remote Code Execution

D-Link DAP-1860 HTTP Header

CVE-2019-19597

privilege escalation

D-Link DAP-1860 timestamp

CVE-2019-19598

weak authentication

Ubuntu Cobbler cobbler-ubuntu-import

CVE-2012-2092

unknown vulnerability

phpMyAdmin Git Information GitRevision.php

CVE-2019-19617

memory corruption

MATLAB - libyang YANG Parser Stack-based

CVE-2019-2224

memory corruption

MATLAB - libyang YANG Parser Stack-based memory corruption

CVE-2019-2223

privilege escalation

JBoxx AS Java Security Policy  

CVE-2019-2222

privilege escalation

Google Android WindowProcessController.java hasActivityInVisibleTask  

CVE-2019-2217

denial of service

Google Android Unicode TextLine.java handleRun

CVE-2019-2226

privilege escalation

Google Android Permission Check PackageInstallerService.java

CVE-2019-2231

information disclosure

Google Android NativeNfcManager.cpp nfcManager_unrouteAid

CVE-2019-2229

memory corruption

Google Android mat.c ReadMATImage

CVE-2019-2228

memory corruption

Google Android ihevcd_ref_list.c ihevcd_ref_list

CVE-2019-2220

memory corruption

Google Android ihevcd_parse_slice.c ihevcd_parse_slice_data

CVE-2019-2224

memory corruption

Google Android GpuStats.cpp setCpuVulkanInUse

CVE-2019-2223

privilege escalation

Google Android Bluetooth Pairing  

CVE-2019-2217

privilege escalation

phpCAS Service Proxy setCacheTimesForAuthRecheck()‎  

CVE-2012-1104