2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2019-12830——In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [vide...
CVE-2019-12829——radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (application...
CVE-2019-12816——Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbit...
CVE-2019-9842——madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element wit...
CVE-2019-12828——An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and orig...
CVE-2019-0316——SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does not...
CVE-2019-0303——SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appServic...
CVE-2019-2259——Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto,...
CVE-2019-2257——Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity,...
CVE-2019-2256——An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdr...
CVE-2019-2255——An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdr...
CVE-2019-12822——In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory asserti...
CVE-2019-11582——An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, ...
CVE-2019-12819——An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c ...
CVE-2019-12818——An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c m...
CVE-2019-12813——An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt used for obfuscating th...
CVE-2019-10959——BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13,...
CVE-2019-7321——Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vuln...
CVE-2019-12798——An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, l...
CVE-2019-5286——There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick ...
CVE-2019-5245——HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL...
CVE-2019-11129——Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala...
CVE-2019-11128——Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable ...
CVE-2019-11127——Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of ...
CVE-2019-11126——Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation ...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now