2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-17015 | HIGH | 8.8 | 1.8% | Jan 8, 2020 | During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and... |
| CVE-2019-17014 | HIGH | 7.4 | 1.1% | Jan 8, 2020 | If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-d... |
| CVE-2019-17013 | HIGH | 8.8 | 0.8% | Jan 8, 2020 | Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corru... |
| CVE-2019-17012 | HIGH | 8.8 | 2.0% | Jan 8, 2020 | Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evi... |
| CVE-2019-17011 | HIGH | 7.5 | 1.5% | Jan 8, 2020 | Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could ca... |
| CVE-2019-17010 | HIGH | 7.5 | 1.6% | Jan 8, 2020 | Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race co... |
| CVE-2019-17009 | HIGH | 7.8 | 0.3% | Jan 8, 2020 | When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unpriv... |
| CVE-2019-17008 | HIGH | 8.8 | 1.9% | Jan 8, 2020 | When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploi... |
| CVE-2019-17005 | HIGH | 8.8 | 1.9% | Jan 8, 2020 | The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possi... |
| CVE-2019-17002 | MEDIUM | 4.3 | 0.7% | Jan 8, 2020 | If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that ... |
| CVE-2019-17001 | MEDIUM | 6.1 | 0.8% | Jan 8, 2020 | A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the... |
| CVE-2019-17000 | MEDIUM | 6.1 | 0.8% | Jan 8, 2020 | An object tag with a data URI did not correctly inherit the document's Content Security Policy. This allowed a CSP bypas... |
| CVE-2019-11765 | MEDIUM | 6.5 | 0.8% | Jan 8, 2020 | A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission... |
| CVE-2019-11764 | HIGH | 8.8 | 1.5% | Jan 8, 2020 | Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of... |
| CVE-2019-11763 | MEDIUM | 6.1 | 1.0% | Jan 8, 2020 | Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entit... |
| CVE-2019-11762 | MEDIUM | 6.1 | 0.6% | Jan 8, 2020 | If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call ar... |
| CVE-2019-11761 | MEDIUM | 5.4 | 0.8% | Jan 8, 2020 | By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned in... |
| CVE-2019-11760 | HIGH | 8.8 | 1.4% | Jan 8, 2020 | A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploit... |
| CVE-2019-11759 | HIGH | 8.8 | 1.8% | Jan 8, 2020 | An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This co... |
| CVE-2019-11758 | HIGH | 8.8 | 1.3% | Jan 8, 2020 | Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installe... |
| CVE-2019-11757 | HIGH | 8.8 | 1.3% | Jan 8, 2020 | When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequent... |
| CVE-2019-11756 | HIGH | 8.8 | 1.5% | Jan 8, 2020 | Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of... |
| CVE-2019-11745 | HIGH | 8.8 | 3.0% | Jan 8, 2020 | When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a sm... |
| CVE-2019-19495 | CRITICAL | 9.8 | 4.3% | Jan 8, 2020 | The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to... |
| CVE-2019-5082 | CRITICAL | 9.8 | 3.3% | Jan 8, 2020 | An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now