2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-16792 | HIGH | 7.5 | 2.1% | Jan 22, 2020 | Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would heade... |
| CVE-2019-5647 | HIGH | 7.1 | 0.3% | Jan 22, 2020 | The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after ... |
| CVE-2019-6858 | HIGH | 7.8 | 0.4% | Jan 22, 2020 | A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software Version prior to V1.0.8.1)... |
| CVE-2019-20388 | HIGH | 7.5 | 3.1% | Jan 21, 2020 | xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. |
| CVE-2019-20387 | HIGH | 7.5 | 2.3% | Jan 21, 2020 | repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose lengt... |
| CVE-2019-19414 | HIGH | 7.5 | 1.0% | Jan 21, 2020 | There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation,... |
| CVE-2019-19413 | HIGH | 7.5 | 1.0% | Jan 21, 2020 | There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation,... |
| CVE-2019-19886 | HIGH | 7.5 | 2.5% | Jan 21, 2020 | Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in lar... |
| CVE-2019-18426 | HIGH | 8.2 | 67.9% | Jan 21, 2020 | A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.... |
| CVE-2019-17584 | HIGH | 7.5 | 1.1% | Jan 21, 2020 | The Meinberg SyncBox/PTP/PTPv2 devices have default SSH keys which allow attackers to get root access to the devices. Al... |
| CVE-2019-18932 | HIGH | 7 | 0.3% | Jan 21, 2020 | log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a ... |
| CVE-2019-3864 | HIGH | 8.8 | 0.4% | Jan 21, 2020 | A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include... |
| CVE-2019-14768 | HIGH | 8.8 | 4.3% | Jan 21, 2020 | An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated us... |
| CVE-2019-14767 | HIGH | 7.5 | 1.4% | Jan 21, 2020 | In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (documen... |
| CVE-2019-14765 | HIGH | 8.8 | 1.1% | Jan 21, 2020 | Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated... |
| CVE-2019-2267 | HIGH | 7.8 | 0.2% | Jan 21, 2020 | Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in S... |
| CVE-2019-14036 | HIGH | 7.8 | 0.2% | Jan 21, 2020 | Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, S... |
| CVE-2019-14034 | HIGH | 7.8 | 0.2% | Jan 21, 2020 | Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon A... |
| CVE-2019-14024 | HIGH | 7.8 | 0.2% | Jan 21, 2020 | Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Sn... |
| CVE-2019-14023 | HIGH | 7.8 | 0.2% | Jan 21, 2020 | String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are prop... |
| CVE-2019-14010 | HIGH | 7.5 | 0.7% | Jan 21, 2020 | The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd ... |
| CVE-2019-14008 | HIGH | 7.5 | 0.8% | Jan 21, 2020 | Possible null pointer dereference issue in location assistance data processing due to missing null check on resources be... |
| CVE-2019-14003 | HIGH | 7.5 | 0.8% | Jan 21, 2020 | Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment informat... |
| CVE-2019-10606 | HIGH | 7.8 | 0.2% | Jan 21, 2020 | Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdrago... |
| CVE-2019-10602 | HIGH | 7.8 | 0.2% | Jan 21, 2020 | Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now