2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-2095 | — | — | 0.7% | Jun 7, 2019 | In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race co... |
| CVE-2019-2094 | — | — | 1.1% | Jun 7, 2019 | In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This ... |
| CVE-2019-2093 | — | — | 1.2% | Jun 7, 2019 | In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to... |
| CVE-2019-2092 | — | — | 0.2% | Jun 7, 2019 | In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a... |
| CVE-2019-2091 | — | — | 0.2% | Jun 7, 2019 | In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass d... |
| CVE-2019-2090 | — | — | 0.1% | Jun 7, 2019 | In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing ... |
| CVE-2019-12779 | — | — | 0.7% | Jun 7, 2019 | libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable fil... |
| CVE-2019-12601 | — | — | 1.1% | Jun 7, 2019 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3). |
| CVE-2019-12600 | — | — | 1.1% | Jun 7, 2019 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3). |
| CVE-2019-12599 | — | — | 1.1% | Jun 7, 2019 | SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection. |
| CVE-2019-12598 | — | — | 1.1% | Jun 7, 2019 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3). |
| CVE-2019-3477 | — | — | 0.6% | Jun 7, 2019 | Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect. |
| CVE-2019-12777 | — | — | 0.4% | Jun 7, 2019 | An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_0... |
| CVE-2019-12776 | — | — | 2.0% | Jun 7, 2019 | An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_0... |
| CVE-2019-12775 | — | — | 1.9% | Jun 7, 2019 | An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_0... |
| CVE-2019-12774 | — | — | 0.8% | Jun 7, 2019 | A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 7004... |
| CVE-2019-12477 | — | — | 13.3% | Jun 7, 2019 | Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcas... |
| CVE-2019-12771 | — | — | 2.8% | Jun 7, 2019 | Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi acti... |
| CVE-2019-12763 | — | — | 1.4% | Jun 7, 2019 | The Security Camera CZ application through 1.6.8 for Android stores potentially sensitive recorded video in external dat... |
| CVE-2019-12492 | — | — | 0.7% | Jun 6, 2019 | Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creati... |
| CVE-2019-11523 | — | — | 1.2% | Jun 6, 2019 | Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption ... |
| CVE-2019-5525 | — | — | 0.4% | Jun 6, 2019 | VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture... |
| CVE-2019-5522 | — | — | 0.5% | Jun 6, 2019 | VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with v... |
| CVE-2019-12761 | — | — | 2.1% | Jun 6, 2019 | A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML d... |
| CVE-2019-6989 | — | — | 11.6% | Jun 6, 2019 | TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispos... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now