2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2019-10168HIGH7.8The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x b...
CVE-2019-10167HIGH7.8The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emul...
CVE-2019-10166HIGH7.8It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to u...
CVE-2019-14524HIGH7.8An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of ...
CVE-2019-14523HIGH7.8An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmt_okt_lo...
CVE-2019-14513HIGH7.5Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that ...
CVE-2019-14497HIGH7.8ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow.
CVE-2019-14496HIGH7.8LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer overflow.
CVE-2019-9140HIGH8.1When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly....
CVE-2019-14494HIGH7.5An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tili...
CVE-2019-14493HIGH7.5An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse...
CVE-2019-14492HIGH7.5An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the functio...
CVE-2019-3890HIGH8.1It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse t...
CVE-2019-0193HIGH7.2In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, ...
CVE-2019-14332HIGH7.8An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is use of weak ciphers fo...
CVE-2019-14465HIGH7.8fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow.
CVE-2019-10185HIGH8.6It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extrac...
CVE-2019-10181HIGH8.1It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file wit...
CVE-2019-10186HIGH8.8A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey (CSRF) token was not being utilised by the XML...
CVE-2019-10182HIGH8.2It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files....
CVE-2019-14459HIGH7.5nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c ...
CVE-2019-1901HIGH8.8A vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco Nexus 9000 Series Application Centric Inf...
CVE-2019-5060HIGH8.8An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2_image 2.0.4. A specially ...
CVE-2019-5059HIGH8.8An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4. A speci...
CVE-2019-5058HIGH8.8An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4. A speci...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now