2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20814 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each... |
| CVE-2019-20813 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference. |
| CVE-2019-20809 | HIGH | 7.5 | 0.9% | Jun 3, 2020 | The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to s... |
| CVE-2019-17603 | HIGH | 7.8 | 0.7% | Jun 2, 2020 | Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x801020... |
| CVE-2019-14087 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon... |
| CVE-2019-14078 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. i... |
| CVE-2019-14077 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Sn... |
| CVE-2019-14066 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Number... |
| CVE-2019-14054 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to norma... |
| CVE-2019-14053 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where... |
| CVE-2019-14043 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto... |
| CVE-2019-14042 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in... |
| CVE-2019-14039 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdrago... |
| CVE-2019-14038 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in com... |
| CVE-2019-20804 | HIGH | 8.8 | 1.1% | May 21, 2020 | Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin accou... |
| CVE-2019-17066 | HIGH | 7.8 | 0.5% | May 18, 2020 | In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registri... |
| CVE-2019-19454 | HIGH | 7.5 | 1.6% | May 18, 2020 | An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue ... |
| CVE-2019-20799 | HIGH | 7.5 | 2.4% | May 18, 2020 | In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work ... |
| CVE-2019-20798 | HIGH | 8.4 | 1.7% | May 18, 2020 | An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displa... |
| CVE-2019-20797 | HIGH | 7.5 | 2.7% | May 18, 2020 | An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for... |
| CVE-2019-20390 | HIGH | 8.1 | 0.7% | May 15, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to r... |
| CVE-2019-19721 | HIGH | 7.8 | 2.0% | May 15, 2020 | An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows re... |
| CVE-2019-9682 | HIGH | 8.1 | 0.9% | May 13, 2020 | Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compati... |
| CVE-2019-15879 | HIGH | 7.4 | 0.7% | May 13, 2020 | In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a... |
| CVE-2019-15878 | HIGH | 7.8 | 0.3% | May 13, 2020 | In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local use... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now