2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-2119 | — | — | 0.1% | Jul 8, 2019 | In multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to improper locking. This... |
| CVE-2019-2118 | — | — | 0.2% | Jul 8, 2019 | In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead t... |
| CVE-2019-2117 | — | — | 0.1% | Jul 8, 2019 | In checkQueryPermission of TelephonyProvider.java, there is a possible disclosure of secure data due to a missing permis... |
| CVE-2019-2116 | — | — | 0.8% | Jul 8, 2019 | In save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could le... |
| CVE-2019-2113 | — | — | 0.1% | Jul 8, 2019 | In setup wizard there is a bypass of some checks when wifi connection is skipped. This could lead to factory reset prote... |
| CVE-2019-2112 | — | — | 0.2% | Jul 8, 2019 | In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local ... |
| CVE-2019-2111 | — | — | 0.8% | Jul 8, 2019 | In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remo... |
| CVE-2019-2109 | — | — | 1.2% | Jul 8, 2019 | In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect boun... |
| CVE-2019-2107 | — | — | 8.9% | Jul 8, 2019 | In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. Th... |
| CVE-2019-2106 | — | — | 1.2% | Jul 8, 2019 | In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This cou... |
| CVE-2019-2105 | — | — | 0.7% | Jul 8, 2019 | In FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to uninitialized data. This ... |
| CVE-2019-2104 | — | — | 0.2% | Jul 8, 2019 | In HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are uninitialized fields. T... |
| CVE-2019-10973 | — | — | 2.4% | Jul 8, 2019 | Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveragi... |
| CVE-2019-13354 | — | — | 3.3% | Jul 8, 2019 | The strong_password gem 0.0.7 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a... |
| CVE-2019-12174 | — | — | 0.4% | Jul 8, 2019 | hide.me before 2.4.4 on macOS suffers from a privilege escalation vulnerability in the connectWithExecutablePath:configF... |
| CVE-2019-12171 | — | — | 0.9% | Jul 8, 2019 | Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext... |
| CVE-2019-13404 | — | — | 1.3% | Jul 8, 2019 | The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for ... |
| CVE-2019-13402 | — | — | 1.5% | Jul 8, 2019 | /usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices ... |
| CVE-2019-13401 | — | — | 0.6% | Jul 8, 2019 | Dynacolor FCM-MB40 v1.2.0.0 devices have CSRF in all scripts under cgi-bin/. |
| CVE-2019-13400 | — | — | 1.6% | Jul 8, 2019 | Dynacolor FCM-MB40 v1.2.0.0 use /etc/appWeb/appweb.pass to store administrative web-interface credentials in cleartext. ... |
| CVE-2019-13399 | — | — | 1.1% | Jul 8, 2019 | Dynacolor FCM-MB40 v1.2.0.0 devices have a hard-coded SSL/TLS key that is used during an administrator's SSL conversatio... |
| CVE-2019-13398 | — | — | 4.1% | Jul 8, 2019 | Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CG... |
| CVE-2019-13391 | — | — | 2.8% | Jul 7, 2019 | In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrec... |
| CVE-2019-13390 | — | — | 1.7% | Jul 7, 2019 | In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c. |
| CVE-2019-13379 | — | — | 3.0% | Jul 7, 2019 | On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privile... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now