2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-10574 | HIGH | 7.1 | 1.6% | Apr 16, 2020 | Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon... |
| CVE-2019-10556 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer... |
| CVE-2019-10547 | HIGH | 7.8 | 0.2% | Apr 16, 2020 | When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snap... |
| CVE-2019-20681 | HIGH | 8.8 | 1.1% | Apr 15, 2020 | Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.6... |
| CVE-2019-20680 | HIGH | 8 | 0.8% | Apr 15, 2020 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000v2 before 1.0.0.53... |
| CVE-2019-12520 | HIGH | 7.5 | 3.9% | Apr 15, 2020 | An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can se... |
| CVE-2019-20659 | HIGH | 7.2 | 1.9% | Apr 15, 2020 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400v2 before 1.0.4.84... |
| CVE-2019-20657 | HIGH | 8 | 1.0% | Apr 15, 2020 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6200 before 1.1.00.36,... |
| CVE-2019-20656 | HIGH | 8.8 | 0.4% | Apr 15, 2020 | Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74... |
| CVE-2019-20655 | HIGH | 7.8 | 0.6% | Apr 15, 2020 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR500 before 2.3.2.56 a... |
| CVE-2019-20654 | HIGH | 7.5 | 0.9% | Apr 15, 2020 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4... |
| CVE-2019-20650 | HIGH | 7.5 | 1.1% | Apr 15, 2020 | Certain NETGEAR devices are affected by denial of service. This affects R8900 before 1.0.5.2, R9000 before 1.0.5.2, XR50... |
| CVE-2019-20649 | HIGH | 7.5 | 1.0% | Apr 15, 2020 | NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information. |
| CVE-2019-20643 | HIGH | 7.5 | 0.8% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information. |
| CVE-2019-20642 | HIGH | 8 | 0.5% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass. |
| CVE-2019-20641 | HIGH | 8.8 | 0.8% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. |
| CVE-2019-20640 | HIGH | 8.8 | 0.6% | Apr 15, 2020 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600... |
| CVE-2019-2880 | HIGH | 8.8 | 1.5% | Apr 15, 2020 | Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications (component: Security... |
| CVE-2019-20767 | HIGH | 7.2 | 1.1% | Apr 15, 2020 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor... |
| CVE-2019-19301 | HIGH | 7.5 | 1.3% | Apr 14, 2020 | A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X2... |
| CVE-2019-19300 | HIGH | 7.5 | 1.5% | Apr 14, 2020 | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation... |
| CVE-2019-14326 | HIGH | 7.8 | 1.3% | Apr 14, 2020 | An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh (ports 22 and 23) ... |
| CVE-2019-18822 | HIGH | 8.8 | 1.4% | Apr 14, 2020 | A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e., the account under which... |
| CVE-2019-11480 | HIGH | 8.1 | 0.5% | Apr 14, 2020 | The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options whe... |
| CVE-2019-13916 | HIGH | 8.8 | 1.2% | Apr 13, 2020 | An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low En... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now