2019 CVE Vulnerabilities
17,619 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14113 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL hands... |
| CVE-2019-14112 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Au... |
| CVE-2019-14111 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti... |
| CVE-2019-14110 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than... |
| CVE-2019-14033 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach re... |
| CVE-2019-14020 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/... |
| CVE-2019-14019 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt ... |
| CVE-2019-14011 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ ... |
| CVE-2019-10622 | CRITICAL | 9.1 | 0.5% | Apr 16, 2020 | Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from u... |
| CVE-2019-10610 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media l... |
| CVE-2019-10609 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdr... |
| CVE-2019-10589 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdr... |
| CVE-2019-10588 | CRITICAL | 9.8 | 0.9% | Apr 16, 2020 | Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote s... |
| CVE-2019-10551 | CRITICAL | 9.1 | 0.9% | Apr 16, 2020 | String error while processing non standard SIP messages received can lead to buffer overread and then denial of service ... |
| CVE-2019-20679 | CRITICAL | 9.8 | 1.3% | Apr 15, 2020 | NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level. |
| CVE-2019-12519 | CRITICAL | 9.8 | 6.7% | Apr 15, 2020 | An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpress... |
| CVE-2019-12524 | CRITICAL | 9.8 | 4.2% | Apr 15, 2020 | An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the re... |
| CVE-2019-20646 | CRITICAL | 9.8 | 1.3% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. |
| CVE-2019-10939 | CRITICAL | 9.8 | 1.1% | Apr 14, 2020 | A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE Advanced (... |
| CVE-2019-16879 | CRITICAL | 9.8 | 1.4% | Apr 14, 2020 | The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentica... |
| CVE-2019-7305 | CRITICAL | 9.8 | 1.8% | Apr 10, 2020 | Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible ... |
| CVE-2019-4393 | CRITICAL | 9.8 | 1.0% | Apr 7, 2020 | HCL AppScan Standard is vulnerable to excessive authorization attempts |
| CVE-2019-17564 | CRITICAL | 9.8 | 35.6% | Apr 1, 2020 | Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST ... |
| CVE-2019-9163 | CRITICAL | 9.8 | 2.3% | Apr 1, 2020 | The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbit... |
| CVE-2019-14880 | CRITICAL | 9.1 | 1.1% | Mar 31, 2020 | A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 p... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now