2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-17010 | HIGH | 7.5 | 1.6% | Jan 8, 2020 | Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race co... |
| CVE-2019-17009 | HIGH | 7.8 | 0.3% | Jan 8, 2020 | When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unpriv... |
| CVE-2019-17008 | HIGH | 8.8 | 1.9% | Jan 8, 2020 | When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploi... |
| CVE-2019-17005 | HIGH | 8.8 | 1.9% | Jan 8, 2020 | The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possi... |
| CVE-2019-11764 | HIGH | 8.8 | 1.5% | Jan 8, 2020 | Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of... |
| CVE-2019-11760 | HIGH | 8.8 | 1.4% | Jan 8, 2020 | A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploit... |
| CVE-2019-11759 | HIGH | 8.8 | 1.8% | Jan 8, 2020 | An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This co... |
| CVE-2019-11758 | HIGH | 8.8 | 1.3% | Jan 8, 2020 | Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installe... |
| CVE-2019-11757 | HIGH | 8.8 | 1.3% | Jan 8, 2020 | When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequent... |
| CVE-2019-11756 | HIGH | 8.8 | 1.5% | Jan 8, 2020 | Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of... |
| CVE-2019-11745 | HIGH | 8.8 | 3.0% | Jan 8, 2020 | When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a sm... |
| CVE-2019-19544 | HIGH | 7.8 | 0.4% | Jan 8, 2020 | CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows... |
| CVE-2019-20362 | HIGH | 7.8 | 0.7% | Jan 8, 2020 | In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of ... |
| CVE-2019-20360 | HIGH | 7.5 | 2.5% | Jan 8, 2020 | A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and ... |
| CVE-2019-17148 | HIGH | 7.8 | 0.5% | Jan 7, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel... |
| CVE-2019-17147 | HIGH | 8.8 | 13.7% | Jan 7, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N rout... |
| CVE-2019-18386 | HIGH | 8.7 | 0.8% | Jan 7, 2020 | Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecif... |
| CVE-2019-14819 | HIGH | 8.8 | 1.0% | Jan 7, 2020 | A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc s... |
| CVE-2019-14866 | HIGH | 7.3 | 0.7% | Jan 7, 2020 | In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is us... |
| CVE-2019-14843 | HIGH | 8.8 | 1.2% | Jan 7, 2020 | A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. Thi... |
| CVE-2019-6857 | HIGH | 7.5 | 1.6% | Jan 6, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi... |
| CVE-2019-6856 | HIGH | 7.5 | 1.6% | Jan 6, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi... |
| CVE-2019-6855 | HIGH | 7.3 | 1.0% | Jan 6, 2020 | Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity P... |
| CVE-2019-6854 | HIGH | 7.8 | 0.2% | Jan 6, 2020 | A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -wi... |
| CVE-2019-18625 | HIGH | 7.5 | 1.7% | Jan 6, 2020 | An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TC... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now