2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14101 | HIGH | 7.1 | 0.2% | Jul 30, 2020 | Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is... |
| CVE-2019-14100 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdrago... |
| CVE-2019-14099 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdra... |
| CVE-2019-14093 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon ... |
| CVE-2019-14037 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Comput... |
| CVE-2019-10580 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been a... |
| CVE-2019-20030 | HIGH | 7.8 | 0.3% | Jul 29, 2020 | An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard... |
| CVE-2019-20029 | HIGH | 8.8 | 1.6% | Jul 29, 2020 | An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, includ... |
| CVE-2019-20028 | HIGH | 7.5 | 1.1% | Jul 29, 2020 | Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices ... |
| CVE-2019-20026 | HIGH | 7.5 | 1.1% | Jul 29, 2020 | The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all ... |
| CVE-2019-18619 | HIGH | 7.8 | 0.5% | Jul 22, 2020 | Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prio... |
| CVE-2019-20915 | HIGH | 8.1 | 1.2% | Jul 16, 2020 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_w... |
| CVE-2019-20913 | HIGH | 8.1 | 1.2% | Jul 16, 2020 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_e... |
| CVE-2019-20912 | HIGH | 8.8 | 1.3% | Jul 16, 2020 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly r... |
| CVE-2019-20910 | HIGH | 8.1 | 1.2% | Jul 16, 2020 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decod... |
| CVE-2019-20909 | HIGH | 7.5 | 1.6% | Jul 16, 2020 | An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LW... |
| CVE-2019-17637 | HIGH | 7.1 | 0.9% | Jul 15, 2020 | In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external en... |
| CVE-2019-12784 | HIGH | 8.8 | 0.7% | Jul 14, 2020 | An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the login form can accept submissions from ext... |
| CVE-2019-4591 | HIGH | 7.8 | 0.3% | Jul 13, 2020 | IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to i... |
| CVE-2019-20907 | HIGH | 7.5 | 3.0% | Jul 13, 2020 | In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when o... |
| CVE-2019-20898 | HIGH | 7.5 | 1.3% | Jul 13, 2020 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information withou... |
| CVE-2019-19417 | HIGH | 7.5 | 0.9% | Jul 8, 2020 | The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit the... |
| CVE-2019-19416 | HIGH | 7.5 | 0.9% | Jul 8, 2020 | The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit the... |
| CVE-2019-19415 | HIGH | 7.5 | 0.9% | Jul 8, 2020 | The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit the... |
| CVE-2019-8250 | HIGH | 7.8 | 3.6% | Jul 6, 2020 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 20... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now