https://vulnogram.org/ Most recent CVEs assigned by BlackBerry (blackberry). https://vulnogram.org/seaview/icons/blackberry.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-18247 https://vulnogram.org/CVE-2026-18247 A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session. Medium Network Exploitable Tue, 11 Aug 2026 16:17:02 GMT https://vulnogram.org/CVE-2026-40272 https://vulnogram.org/CVE-2026-40272 Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace event log (.kev) file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or… High Wed, 29 Jul 2026 17:58:27 GMT https://vulnogram.org/CVE-2026-18084 https://vulnogram.org/CVE-2026-18084 Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier. High Network Exploitable Tue, 28 Jul 2026 16:22:26 GMT https://vulnogram.org/CVE-2026-18085 https://vulnogram.org/CVE-2026-18085 An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service. Medium Network Exploitable Tue, 28 Jul 2026 16:21:59 GMT https://vulnogram.org/CVE-2026-4018 https://vulnogram.org/CVE-2026-4018 TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel. Medium Tue, 14 Jul 2026 17:34:01 GMT https://vulnogram.org/CVE-2026-4017 https://vulnogram.org/CVE-2026-4017 Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel. High Tue, 14 Jul 2026 17:25:13 GMT https://vulnogram.org/CVE-2026-0515 https://vulnogram.org/CVE-2026-0515 Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel. Medium Tue, 14 Jul 2026 17:13:07 GMT https://vulnogram.org/CVE-2025-8090 https://vulnogram.org/CVE-2025-8090 Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel. Medium Tue, 13 Jan 2026 16:36:21 GMT https://vulnogram.org/CVE-2025-12766 https://vulnogram.org/CVE-2025-12766 An Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of BlackBerry® AtHoc® (OnPrem) version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive… Medium Wed, 19 Nov 2025 16:08:50 GMT https://vulnogram.org/CVE-2025-2474 https://vulnogram.org/CVE-2025-2474 Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec. Critical Network Exploitable Tue, 10 Jun 2025 17:38:03 GMT https://vulnogram.org/CVE-2024-48858 https://vulnogram.org/CVE-2024-48858 Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec. High Network Exploitable Tue, 14 Jan 2025 19:09:15 GMT https://vulnogram.org/CVE-2024-48857 https://vulnogram.org/CVE-2024-48857 NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec. High Network Exploitable Tue, 14 Jan 2025 19:06:38 GMT https://vulnogram.org/CVE-2024-48856 https://vulnogram.org/CVE-2024-48856 Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec. Critical Network Exploitable Tue, 14 Jan 2025 19:03:33 GMT https://vulnogram.org/CVE-2024-48855 https://vulnogram.org/CVE-2024-48855 Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec. Medium Network Exploitable Tue, 14 Jan 2025 18:59:25 GMT https://vulnogram.org/CVE-2024-48854 https://vulnogram.org/CVE-2024-48854 Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec. Medium Network Exploitable Tue, 14 Jan 2025 18:53:25 GMT https://vulnogram.org/CVE-2024-51723 https://vulnogram.org/CVE-2024-51723 A Stored Cross-Site Scripting (XSS) vulnerability in the Management Console of BlackBerry AtHoc version 7.15 could allow an attacker to potentially execute actions in the context of the victim's session. Medium Mon, 25 Nov 2024 18:44:24 GMT https://vulnogram.org/CVE-2024-51722 https://vulnogram.org/CVE-2024-51722 A local privilege escalation vulnerability in the SecuSUITE Server (System Configuration) of SecuSUITE versions 5.0.420 and earlier could allow a successful attacker that had gained control of code running under one of the system accounts listed in t… Medium Tue, 12 Nov 2024 18:08:12 GMT https://vulnogram.org/CVE-2024-51721 https://vulnogram.org/CVE-2024-51721 A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with r… High Tue, 12 Nov 2024 18:05:32 GMT https://vulnogram.org/CVE-2024-51720 https://vulnogram.org/CVE-2024-51720 An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telepho… Medium Network Exploitable Tue, 12 Nov 2024 18:01:49 GMT https://vulnogram.org/CVE-2024-35215 https://vulnogram.org/CVE-2024-35215 NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the… Medium Tue, 08 Oct 2024 17:35:57 GMT https://vulnogram.org/CVE-2024-35214 https://vulnogram.org/CVE-2024-35214 A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of Cyla… High Tue, 20 Aug 2024 17:24:53 GMT https://vulnogram.org/CVE-2024-35213 https://vulnogram.org/CVE-2024-35213 An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service condition or execute code in the context of the image processing process. Critical Network Exploitable Tue, 11 Jun 2024 18:37:04 GMT https://vulnogram.org/CVE-2023-32701 https://vulnogram.org/CVE-2023-32701 Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition. High Tue, 14 Nov 2023 18:33:59 GMT https://vulnogram.org/CVE-2023-21520 https://vulnogram.org/CVE-2023-21520 A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization. Tue, 12 Sep 2023 19:45:51 GMT https://vulnogram.org/CVE-2023-21523 https://vulnogram.org/CVE-2023-21523 A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account. Tue, 12 Sep 2023 19:44:02 GMT https://vulnogram.org/CVE-2023-21522 https://vulnogram.org/CVE-2023-21522 A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially control a script that is executed in the victim's browser then they can execute script co… Tue, 12 Sep 2023 18:29:24 GMT https://vulnogram.org/CVE-2023-21521 https://vulnogram.org/CVE-2023-21521 An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute admini… Tue, 12 Sep 2023 18:18:34 GMT https://vulnogram.org/CVE-2022-37426 https://vulnogram.org/CVE-2022-37426 Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection. Medium Fri, 28 Oct 2022 15:09:21 GMT https://vulnogram.org/CVE-2022-37425 https://vulnogram.org/CVE-2022-37425 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code Inclusion. Critical Fri, 28 Oct 2022 15:09:21 GMT https://vulnogram.org/CVE-2022-37424 https://vulnogram.org/CVE-2022-37424 Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery. Medium Fri, 28 Oct 2022 15:09:20 GMT https://vulnogram.org/CVE-2021-32025 https://vulnogram.org/CVE-2021-32025 An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versi… High Wed, 09 Mar 2022 20:37:56 GMT https://vulnogram.org/CVE-2021-32024 https://vulnogram.org/CVE-2021-32024 A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process. Critical Network Exploitable Mon, 13 Dec 2021 18:06:24 GMT https://vulnogram.org/CVE-2021-32023 https://vulnogram.org/CVE-2021-32023 An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rig… Wed, 10 Nov 2021 17:35:32 GMT https://vulnogram.org/CVE-2021-32022 https://vulnogram.org/CVE-2021-32022 A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights… Wed, 10 Nov 2021 17:34:32 GMT https://vulnogram.org/CVE-2021-32021 https://vulnogram.org/CVE-2021-32021 A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on… Wed, 10 Nov 2021 17:33:00 GMT https://vulnogram.org/CVE-2021-22156 https://vulnogram.org/CVE-2021-22156 An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1 and earlier, QNX OS for Medical 1.1 and earlier, and QNX OS for Safety… Critical Network Exploitable Tue, 17 Aug 2021 18:35:38 GMT https://vulnogram.org/CVE-2021-22154 https://vulnogram.org/CVE-2021-22154 An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history. Thu, 13 May 2021 10:44:01 GMT https://vulnogram.org/CVE-2021-22153 https://vulnogram.org/CVE-2021-22153 A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on th… Thu, 13 May 2021 10:43:52 GMT https://vulnogram.org/CVE-2021-22152 https://vulnogram.org/CVE-2021-22152 A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user co… Thu, 13 May 2021 10:43:47 GMT https://vulnogram.org/CVE-2021-22155 https://vulnogram.org/CVE-2021-22155 An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) version(s) 10.1, 9.1 and earlier could allow an attacker to potentially gain access to the application in the cont… Wed, 12 May 2021 23:01:37 GMT https://vulnogram.org/CVE-2020-6933 https://vulnogram.org/CVE-2020-6933 An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service. Wed, 14 Oct 2020 13:31:17 GMT https://vulnogram.org/CVE-2020-6932 https://vulnogram.org/CVE-2020-6932 An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary exec… Critical Network Exploitable Wed, 12 Aug 2020 12:21:32 GMT https://vulnogram.org/CVE-2019-8998 https://vulnogram.org/CVE-2019-8998 An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to pote… High Fri, 12 Jul 2019 15:30:28 GMT https://vulnogram.org/CVE-2019-8999 https://vulnogram.org/CVE-2019-8999 An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account. Thu, 18 Apr 2019 16:51:41 GMT https://vulnogram.org/CVE-2019-8997 https://vulnogram.org/CVE-2019-8997 An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make request… Thu, 21 Mar 2019 17:12:15 GMT https://vulnogram.org/CVE-2018-8892 https://vulnogram.org/CVE-2018-8892 A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator. Thu, 20 Dec 2018 20:00:00 GMT https://vulnogram.org/CVE-2018-8891 https://vulnogram.org/CVE-2018-8891 Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Con… Thu, 20 Dec 2018 20:00:00 GMT https://vulnogram.org/CVE-2018-8888 https://vulnogram.org/CVE-2018-8888 A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console adm… Thu, 20 Dec 2018 20:00:00 GMT https://vulnogram.org/CVE-2018-8890 https://vulnogram.org/CVE-2018-8890 An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user. Fri, 12 Oct 2018 13:00:00 GMT https://vulnogram.org/CVE-2018-8889 https://vulnogram.org/CVE-2018-8889 A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account. Wed, 19 Sep 2018 21:00:00 GMT