Security Vulnerabilities - CVEs Published In December 2019
Static HTTP Server 1.0 has a Local Overflow
CVSS Score
9.8
EPSS Score
0.081
Published
2019-12-27
Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.
CVSS Score
4.6
EPSS Score
0.002
Published
2019-12-27
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
CVSS Score
4.3
EPSS Score
0.002
Published
2019-12-27
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request
CVSS Score
8.8
EPSS Score
0.006
Published
2019-12-27
INSTEON Hub 2242-222 lacks Web and API authentication
CVSS Score
8.1
EPSS Score
0.086
Published
2019-12-27
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
CVSS Score
6.3
EPSS Score
0.01
Published
2019-12-27
Karotz API 12.07.19.00: Session Token Information Disclosure
CVSS Score
5.3
EPSS Score
0.222
Published
2019-12-27
Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
CVSS Score
8.8
EPSS Score
0.141
Published
2019-12-27
Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials
CVSS Score
9.8
EPSS Score
0.094
Published
2019-12-27
AVTECH AVN801 DVR has a security bypass via the administration login captcha
CVSS Score
9.8
EPSS Score
0.289
Published
2019-12-27