2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19962 | HIGH | 7.5 | 0.9% | Dec 25, 2019 | wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography. |
| CVE-2019-5702 | HIGH | 7.8 | 0.4% | Dec 24, 2019 | NVIDIA GeForce Experience, all versions prior to 3.20.2, contains a vulnerability when GameStream is enabled in which an... |
| CVE-2019-19925 | HIGH | 7.5 | 6.8% | Dec 24, 2019 | zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. |
| CVE-2019-19956 | HIGH | 7.5 | 5.6% | Dec 24, 2019 | xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. |
| CVE-2019-19923 | HIGH | 7.5 | 6.8% | Dec 24, 2019 | flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which t... |
| CVE-2019-19954 | HIGH | 7.3 | 0.5% | Dec 24, 2019 | Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\n... |
| CVE-2019-19695 | HIGH | 7.5 | 3.2% | Dec 24, 2019 | A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below) could potentially allow... |
| CVE-2019-18211 | HIGH | 8.8 | 2.9% | Dec 23, 2019 | An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to un... |
| CVE-2019-5539 | HIGH | 7.8 | 0.4% | Dec 23, 2019 | VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4) conta... |
| CVE-2019-18236 | HIGH | 7.8 | 2.8% | Dec 23, 2019 | Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An at... |
| CVE-2019-8463 | HIGH | 7.5 | 1.2% | Dec 23, 2019 | A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that c... |
| CVE-2019-3467 | HIGH | 7.8 | 0.5% | Dec 23, 2019 | Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26... |
| CVE-2019-6687 | HIGH | 7.4 | 0.5% | Dec 23, 2019 | On versions 15.0.0-15.0.1.1, the BIG-IP ASM Cloud Security Services profile uses a built-in verification mechanism that ... |
| CVE-2019-6685 | HIGH | 7.8 | 0.4% | Dec 23, 2019 | On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1,... |
| CVE-2019-6684 | HIGH | 7.5 | 1.0% | Dec 23, 2019 | On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditi... |
| CVE-2019-6683 | HIGH | 7.5 | 1.0% | Dec 23, 2019 | On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IP... |
| CVE-2019-6681 | HIGH | 7.5 | 1.1% | Dec 23, 2019 | On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in M... |
| CVE-2019-6680 | HIGH | 7.5 | 1.1% | Dec 23, 2019 | On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5, while... |
| CVE-2019-5276 | HIGH | 8.8 | 0.4% | Dec 23, 2019 | Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer overflow vulnerability. A... |
| CVE-2019-5266 | HIGH | 7.5 | 0.9% | Dec 23, 2019 | Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input validation vulnerability. Attac... |
| CVE-2019-5265 | HIGH | 7.5 | 0.8% | Dec 23, 2019 | Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control vulnerability. The functio... |
| CVE-2019-12418 | HIGH | 7 | 1.2% | Dec 23, 2019 | When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Lis... |
| CVE-2019-6682 | HIGH | 7.5 | 1.0% | Dec 23, 2019 | On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP ASM system... |
| CVE-2019-6677 | HIGH | 7.5 | 1.0% | Dec 23, 2019 | On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, under certain condit... |
| CVE-2019-6676 | HIGH | 7.5 | 1.0% | Dec 23, 2019 | On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition (VE) when usi... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now