CVEs

408,318 total · page 5600 of 8,167

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-15359	Haier A6	Med	0.36	5.5	0.00	Nov 14, 2019	The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15358	Dexp Z250	Med	0.36	5.5	0.00	Nov 14, 2019	The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15357	Advan i6A	Med	0.36	5.5	0.00	Nov 14, 2019	The Advan i6A Android device with a build fingerprint of ADVAN/i6A/i6A:8.1.0/O11019/1523602705:userdebug/test-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15356	LAVA Flair Z1	Med	0.36	5.5	0.00	Nov 14, 2019	The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15355	Tecno Camon Iclick Firmware	Med	0.36	5.5	0.00	Nov 14, 2019	The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on…
CVE-2019-15354	Mediatek com.mediatek.wfo.impl	Med	0.36	5.5	0.00	Nov 14, 2019	The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone_Armor_5/Ulefone_Armor_5:8.1.0/O11019/1528806701:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app…
CVE-2019-15353	Coolpad N3C	Med	0.36	5.5	0.00	Nov 14, 2019	The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15352	Coolpad 1851 Android device	Med	0.36	5.5	0.00	Nov 14, 2019	The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on…
CVE-2019-15351	Tecno H622	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported…
CVE-2019-15350	Tecno com.lovelyfont.defcontainer	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported…
CVE-2019-15349	Tecno com.lovelyfont.defcontainer	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an…
CVE-2019-15348	Com.lovelyfont defcontainer	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an…
CVE-2019-15347	Tecno Camon iClick 2	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an…
CVE-2019-15346	Tecno Camon iClick 2	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an…
CVE-2019-15345	Tecno Camon Iclick Firmware	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.8). This app contains an…
CVE-2019-15344	Tecno Camon Iclick Firmware	Hig	0.53	8.1	0.01	Nov 14, 2019	The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.8). This app contains an…
CVE-2019-15343	Tecno Camon Iclick Firmware	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.8). This app contains an…
CVE-2019-15342	Tecno Camon iAir 2 Plus	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains…
CVE-2019-15341	Tecno Camon iAir 2 Plus	Hig	0.51	7.8	0.00	Nov 14, 2019	The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains…
CVE-2019-15340	Xiaomi Redmi 6 Pro	Low	0.21	3.3	0.00	Nov 14, 2019	The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201805292006)…
CVE-2019-15339	LAVA com.android.lava.powersave	Low	0.21	3.3	0.00	Nov 14, 2019	The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…
CVE-2019-15338	LAVA com.android.lava.powersave	Low	0.21	3.3	0.00	Nov 14, 2019	The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app…
CVE-2019-15337	LAVA Z81	Low	0.21	3.3	0.00	Nov 14, 2019	The Lava Z81 Android device with a build fingerprint of LAVA/Z81/Z81:8.1.0/O11019/1532317309:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.31) that allows any app co-located on the device…
CVE-2019-15336	LAVA com.android.lava.powersave	Low	0.21	3.3	0.00	Nov 14, 2019	The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.31) that allows any app…
CVE-2019-15335	LAVA com.android.lava.powersave	Low	0.21	3.3	0.00	Nov 14, 2019	The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the device…
CVE-2019-15334	LAVA iris88_go	Low	0.21	3.3	0.00	Nov 14, 2019	The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app…
CVE-2019-15333	LAVA Flair Z1	Low	0.21	3.3	0.00	Nov 14, 2019	The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…
CVE-2019-15332	LAVA com.android.lava.powersave	Low	0.21	3.3	0.00	Nov 14, 2019	The Lava Z61 Android device with a build fingerprint of LAVA/Z61_2GB/Z61_2GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…
CVE-2019-14818	DPDK Dpdk	Hig	0.49	7.5	0.03	Nov 14, 2019	A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory…
CVE-2019-14602	Nuvoton CIR Driver	Hig	0.51	7.8	0.00	Nov 14, 2019	Improper permissions in the installer for the Nuvoton* CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2019-14566	Intel Intel(R) SGX SDK	Hig	0.51	7.8	0.00	Nov 14, 2019	Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
CVE-2019-14565	Intel Sgx SDK	Hig	0.51	7.8	0.00	Nov 14, 2019	Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
CVE-2019-11182	Intel Baseboard Management Controller Firmware	Hig	0.49	7.5	0.01	Nov 14, 2019	Memory corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11181	Intel Baseboard Management Controller Firmware	Hig	0.51	7.8	0.00	Nov 14, 2019	Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVE-2019-11180	Intel Baseboard Management Controller Firmware	Hig	0.49	7.5	0.01	Nov 14, 2019	Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11179	Intel Baseboard Management Controller Firmware	Med	0.42	6.5	0.01	Nov 14, 2019	Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access.
CVE-2019-11178	Intel Baseboard Management Controller Firmware	Hig	0.53	8.1	0.01	Nov 14, 2019	Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access.
CVE-2019-11177	Intel Baseboard Management Controller Firmware	Hig	0.49	7.5	0.01	Nov 14, 2019	Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11175	Intel Baseboard Management Controller Firmware	Hig	0.49	7.5	0.01	Nov 14, 2019	Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11174	Intel Baseboard Management Controller Firmware	Med	0.35	5.3	0.01	Nov 14, 2019	Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2019-11173	Intel Baseboard Management Controller Firmware	Hig	0.46	7.1	0.00	Nov 14, 2019	Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via local access.
CVE-2019-11172	Intel Baseboard Management Controller Firmware	Med	0.35	5.3	0.01	Nov 14, 2019	Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2019-11171	Intel Baseboard Management Controller Firmware	Cri	0.64	9.8	0.02	Nov 14, 2019	Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via network access.
CVE-2019-11170	Intel Baseboard Management Controller Firmware	Hig	0.51	7.8	0.00	Nov 14, 2019	Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access.
CVE-2019-11168	Intel Baseboard Management Controller Firmware	Cri	0.59	9.1	0.01	Nov 14, 2019	Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
CVE-2019-11156	Intel PROSet/Wireless WiFi software	Hig	0.51	7.8	0.00	Nov 14, 2019	Logic errors in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access.
CVE-2019-11155	Intel PROSet/Wireless WiFi software	Hig	0.46	7.1	0.00	Nov 14, 2019	Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.
CVE-2019-11154	Intel PROSet/Wireless WiFi software	Hig	0.46	7.1	0.00	Nov 14, 2019	Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.
CVE-2019-11153	Intel PROSet/Wireless WiFi software	Hig	0.51	7.8	0.00	Nov 14, 2019	Memory corruption issues in Intel(R) PROSet/Wireless WiFi Software extension DLL before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and a denial of service via local access.
CVE-2019-11152	Intel WiFi Drivers	Hig	0.57	8.8	0.01	Nov 14, 2019	Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of service, and information disclosure via adjacent access.

CVE-2019-15359MedNov 14, 2019
Haier
A6
risk 0.36cvss 5.5epss 0.00
The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15358MedNov 14, 2019
Dexp
Z250
risk 0.36cvss 5.5epss 0.00
The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15357MedNov 14, 2019
Advan
i6A
risk 0.36cvss 5.5epss 0.00
The Advan i6A Android device with a build fingerprint of ADVAN/i6A/i6A:8.1.0/O11019/1523602705:userdebug/test-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15356MedNov 14, 2019
LAVA
Flair Z1
risk 0.36cvss 5.5epss 0.00
The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15355MedNov 14, 2019
Tecno
Camon Iclick Firmware
risk 0.36cvss 5.5epss 0.00
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on…
CVE-2019-15354MedNov 14, 2019
Mediatek
com.mediatek.wfo.impl
risk 0.36cvss 5.5epss 0.00
The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone_Armor_5/Ulefone_Armor_5:8.1.0/O11019/1528806701:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app…
CVE-2019-15353MedNov 14, 2019
Coolpad
N3C
risk 0.36cvss 5.5epss 0.00
The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…
CVE-2019-15352MedNov 14, 2019
Coolpad
1851 Android device
risk 0.36cvss 5.5epss 0.00
The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on…
CVE-2019-15351HigNov 14, 2019
Tecno
H622
risk 0.51cvss 7.8epss 0.00
The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported…
CVE-2019-15350HigNov 14, 2019
Tecno
com.lovelyfont.defcontainer
risk 0.51cvss 7.8epss 0.00
The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported…
CVE-2019-15349HigNov 14, 2019
Tecno
com.lovelyfont.defcontainer
risk 0.51cvss 7.8epss 0.00
The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an…
CVE-2019-15348HigNov 14, 2019
Com.lovelyfont
defcontainer
risk 0.51cvss 7.8epss 0.00
The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an…
CVE-2019-15347HigNov 14, 2019
Tecno
Camon iClick 2
risk 0.51cvss 7.8epss 0.00
The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an…
CVE-2019-15346HigNov 14, 2019
Tecno
Camon iClick 2
risk 0.51cvss 7.8epss 0.00
The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an…
CVE-2019-15345HigNov 14, 2019
Tecno
Camon Iclick Firmware
risk 0.51cvss 7.8epss 0.00
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.8). This app contains an…
CVE-2019-15344HigNov 14, 2019
Tecno
Camon Iclick Firmware
risk 0.53cvss 8.1epss 0.01
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.8). This app contains an…
CVE-2019-15343HigNov 14, 2019
Tecno
Camon Iclick Firmware
risk 0.51cvss 7.8epss 0.00
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.8). This app contains an…
CVE-2019-15342HigNov 14, 2019
Tecno
Camon iAir 2 Plus
risk 0.51cvss 7.8epss 0.00
The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains…
CVE-2019-15341HigNov 14, 2019
Tecno
Camon iAir 2 Plus
risk 0.51cvss 7.8epss 0.00
The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains…
CVE-2019-15340LowNov 14, 2019
Xiaomi
Redmi 6 Pro
risk 0.21cvss 3.3epss 0.00
The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201805292006)…
CVE-2019-15339LowNov 14, 2019
LAVA
com.android.lava.powersave
risk 0.21cvss 3.3epss 0.00
The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…
CVE-2019-15338LowNov 14, 2019
LAVA
com.android.lava.powersave
risk 0.21cvss 3.3epss 0.00
The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app…
CVE-2019-15337LowNov 14, 2019
LAVA
Z81
risk 0.21cvss 3.3epss 0.00
The Lava Z81 Android device with a build fingerprint of LAVA/Z81/Z81:8.1.0/O11019/1532317309:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.31) that allows any app co-located on the device…
CVE-2019-15336LowNov 14, 2019
LAVA
com.android.lava.powersave
risk 0.21cvss 3.3epss 0.00
The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.31) that allows any app…
CVE-2019-15335LowNov 14, 2019
LAVA
com.android.lava.powersave
risk 0.21cvss 3.3epss 0.00
The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the device…
CVE-2019-15334LowNov 14, 2019
LAVA
iris88_go
risk 0.21cvss 3.3epss 0.00
The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app…
CVE-2019-15333LowNov 14, 2019
LAVA
Flair Z1
risk 0.21cvss 3.3epss 0.00
The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…
CVE-2019-15332LowNov 14, 2019
LAVA
com.android.lava.powersave
risk 0.21cvss 3.3epss 0.00
The Lava Z61 Android device with a build fingerprint of LAVA/Z61_2GB/Z61_2GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…
CVE-2019-14818HigNov 14, 2019
DPDK
Dpdk
risk 0.49cvss 7.5epss 0.03
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory…
CVE-2019-14602HigNov 14, 2019
Nuvoton
CIR Driver
risk 0.51cvss 7.8epss 0.00
Improper permissions in the installer for the Nuvoton* CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2019-14566HigNov 14, 2019
Intel
Intel(R) SGX SDK
risk 0.51cvss 7.8epss 0.00
Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
CVE-2019-14565HigNov 14, 2019
Intel
Sgx SDK
risk 0.51cvss 7.8epss 0.00
Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
CVE-2019-11182HigNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.49cvss 7.5epss 0.01
Memory corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11181HigNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.51cvss 7.8epss 0.00
Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVE-2019-11180HigNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.49cvss 7.5epss 0.01
Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11179MedNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.42cvss 6.5epss 0.01
Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access.
CVE-2019-11178HigNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.53cvss 8.1epss 0.01
Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access.
CVE-2019-11177HigNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.49cvss 7.5epss 0.01
Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11175HigNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.49cvss 7.5epss 0.01
Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2019-11174MedNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.35cvss 5.3epss 0.01
Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2019-11173HigNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.46cvss 7.1epss 0.00
Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via local access.
CVE-2019-11172MedNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.35cvss 5.3epss 0.01
Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2019-11171CriNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.64cvss 9.8epss 0.02
Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via network access.
CVE-2019-11170HigNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.51cvss 7.8epss 0.00
Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access.
CVE-2019-11168CriNov 14, 2019
Intel
Baseboard Management Controller Firmware
risk 0.59cvss 9.1epss 0.01
Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
CVE-2019-11156HigNov 14, 2019
Intel
PROSet/Wireless WiFi software
risk 0.51cvss 7.8epss 0.00
Logic errors in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access.
CVE-2019-11155HigNov 14, 2019
Intel
PROSet/Wireless WiFi software
risk 0.46cvss 7.1epss 0.00
Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.
CVE-2019-11154HigNov 14, 2019
Intel
PROSet/Wireless WiFi software
risk 0.46cvss 7.1epss 0.00
Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.
CVE-2019-11153HigNov 14, 2019
Intel
PROSet/Wireless WiFi software
risk 0.51cvss 7.8epss 0.00
Memory corruption issues in Intel(R) PROSet/Wireless WiFi Software extension DLL before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and a denial of service via local access.
CVE-2019-11152HigNov 14, 2019
Intel
WiFi Drivers
risk 0.57cvss 8.8epss 0.01
Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of service, and information disclosure via adjacent access.