2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-2059 | HIGH | 8.8 | 0.7% | Sep 27, 2019 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut... |
| CVE-2019-2055 | HIGH | 8.8 | 0.7% | Sep 27, 2019 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut... |
| CVE-2019-16924 | HIGH | 8.8 | 0.7% | Sep 27, 2019 | The Nulock application 1.5.0 for mobile devices sends a cleartext password over Bluetooth, which allows remote attackers... |
| CVE-2019-11755 | HIGH | 7.5 | 1.1% | Sep 27, 2019 | A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a val... |
| CVE-2019-11753 | HIGH | 7.8 | 0.2% | Sep 27, 2019 | The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from man... |
| CVE-2019-11752 | HIGH | 8.8 | 2.2% | Sep 27, 2019 | It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a ... |
| CVE-2019-11751 | HIGH | 8.8 | 1.1% | Sep 27, 2019 | Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as ... |
| CVE-2019-11746 | HIGH | 8.8 | 1.7% | Sep 27, 2019 | A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This... |
| CVE-2019-11740 | HIGH | 8.8 | 1.6% | Sep 27, 2019 | Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox ... |
| CVE-2019-11736 | HIGH | 7 | 0.2% | Sep 27, 2019 | The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, ... |
| CVE-2019-11735 | HIGH | 8.8 | 1.2% | Sep 27, 2019 | Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of t... |
| CVE-2019-9853 | HIGH | 7.8 | 3.2% | Sep 27, 2019 | LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings,... |
| CVE-2019-8075 | HIGH | 7.5 | 3.0% | Sep 27, 2019 | Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful ex... |
| CVE-2019-8072 | HIGH | 7.5 | 7.4% | Sep 27, 2019 | ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. S... |
| CVE-2019-16921 | HIGH | 7.5 | 2.0% | Sep 27, 2019 | In the Linux kernel before 4.17, hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c does not initializ... |
| CVE-2019-16902 | HIGH | 7.5 | 9.7% | Sep 27, 2019 | In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an... |
| CVE-2019-11279 | HIGH | 8.8 | 1.3% | Sep 26, 2019 | CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requ... |
| CVE-2019-15862 | HIGH | 7.5 | 1.5% | Sep 26, 2019 | An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote attackers to upload fil... |
| CVE-2019-11278 | HIGH | 8.8 | 1.3% | Sep 26, 2019 | CF UAA versions prior to 74.1.0, allow external input to be directly queried against. A remote malicious user with 'clie... |
| CVE-2019-16667 | HIGH | 8.8 | 54.5% | Sep 26, 2019 | diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executi... |
| CVE-2019-6175 | HIGH | 7.5 | 1.7% | Sep 26, 2019 | A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow conf... |
| CVE-2019-6161 | HIGH | 7.5 | 1.4% | Sep 26, 2019 | An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB ... |
| CVE-2019-16869 | HIGH | 7.5 | 8.4% | Sep 26, 2019 | Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked... |
| CVE-2019-12091 | HIGH | 7.8 | 0.9% | Sep 26, 2019 | The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts ... |
| CVE-2019-10882 | HIGH | 7.8 | 0.4% | Sep 26, 2019 | The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now