# BlackBerry QNX Software Development Platform (QNX SDP).

Every CVE that names BlackBerry QNX Software Development Platform (QNX SDP) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.…](https://agentprime.io/advisories/CVE-2019-8998.md)
  `CVE-2019-8998` · CVE record: BlackBerry QNX Software Development Platform (QNX SDP) · CVSS 7.8 High · Not analysed yet · Published 12 Jul 2019 · Tags: CWE-413
- [In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able…](https://agentprime.io/advisories/CVE-2017-9371.md)
  `CVE-2017-9371` · CVE record: BlackBerry QNX Software Development Platform (QNX SDP) · CVSS 2.6 Low · Not analysed yet · Published 14 Nov 2017 · Tags: CWE-332
- [Incomplete vulnerability mitigations](https://agentprime.io/advisories/CVE-2017-3893.md)
  `CVE-2017-3893` · CVE record: BlackBerry QNX Software Development Platform (QNX SDP) · CVSS 1.9 Low · Not analysed yet · Published 14 Nov 2017 · Tags: CWE-693
- [In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more Q…](https://agentprime.io/advisories/CVE-2017-3891.md)
  `CVE-2017-3891` · CVE record: BlackBerry QNX Software Development Platform (QNX SDP) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2017 · Tags: CWE-923

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=blackberry-qnx-software-development-platform-qnx-sdp>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/blackberry-qnx-software-development-platform-qnx-sdp/>. Everything for agents: <https://agentprime.io/llms.txt>.