2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14055 | HIGH | 7.8 | 0.2% | Feb 7, 2020 | Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling p... |
| CVE-2019-14051 | HIGH | 7.8 | 0.2% | Feb 7, 2020 | Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then... |
| CVE-2019-14049 | HIGH | 7.8 | 0.2% | Feb 7, 2020 | Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is n... |
| CVE-2019-14046 | HIGH | 7.8 | 0.2% | Feb 7, 2020 | Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in ... |
| CVE-2019-14044 | HIGH | 7.8 | 0.2% | Feb 7, 2020 | Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close... |
| CVE-2019-14041 | HIGH | 7.8 | 0.4% | Feb 7, 2020 | During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updat... |
| CVE-2019-14040 | HIGH | 7.8 | 0.5% | Feb 7, 2020 | Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of ... |
| CVE-2019-14002 | HIGH | 7.8 | 0.2% | Feb 7, 2020 | APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in ... |
| CVE-2019-10590 | CRITICAL | 9.8 | 0.9% | Feb 7, 2020 | Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdrag... |
| CVE-2019-10567 | HIGH | 7.8 | 0.2% | Feb 7, 2020 | There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existi... |
| CVE-2019-6479 | — | — | — | Feb 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2019-6478 | — | — | — | Feb 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2019-17589 | — | — | — | Feb 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2019-17588 | — | — | — | Feb 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2019-17587 | — | — | — | Feb 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2019-17586 | — | — | — | Feb 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2019-17585 | — | — | — | Feb 6, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
| CVE-2019-19800 | MEDIUM | 5.3 | 3.9% | Feb 6, 2020 | Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file name... |
| CVE-2019-12426 | MEDIUM | 5.3 | 4.9% | Feb 6, 2020 | an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache O... |
| CVE-2019-17652 | MEDIUM | 6.5 | 1.4% | Feb 6, 2020 | A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to ca... |
| CVE-2019-16152 | MEDIUM | 6.5 | 1.4% | Feb 6, 2020 | A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to... |
| CVE-2019-15711 | HIGH | 7.8 | 0.5% | Feb 6, 2020 | A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to ru... |
| CVE-2019-10789 | CRITICAL | 9.8 | 4.9% | Feb 6, 2020 | All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be control... |
| CVE-2019-20406 | HIGH | 7.8 | 0.5% | Feb 6, 2020 | The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0... |
| CVE-2019-20405 | MEDIUM | 4.3 | 0.6% | Feb 6, 2020 | The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn th... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now