2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-10607 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string... |
| CVE-2019-10605 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from ... |
| CVE-2019-10601 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from fir... |
| CVE-2019-10600 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid st... |
| CVE-2019-10598 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to en... |
| CVE-2019-10595 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received fro... |
| CVE-2019-10584 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Comp... |
| CVE-2019-10564 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in S... |
| CVE-2019-10544 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handler... |
| CVE-2019-10537 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass th... |
| CVE-2019-10536 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is... |
| CVE-2019-10518 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon C... |
| CVE-2019-10517 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Comp... |
| CVE-2019-10481 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly ... |
| CVE-2019-10480 | HIGH | 7.8 | 0.2% | Dec 18, 2019 | Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmwar... |
| CVE-2019-7481 | HIGH | 7.5 | 99.9% | Dec 17, 2019 | Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vu... |
| CVE-2019-11657 | HIGH | 8.8 | 0.5% | Dec 17, 2019 | Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version... |
| CVE-2019-3995 | HIGH | 7.5 | 28.5% | Dec 17, 2019 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remot... |
| CVE-2019-3994 | HIGH | 7.5 | 2.9% | Dec 17, 2019 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthen... |
| CVE-2019-3993 | HIGH | 7.5 | 45.7% | Dec 17, 2019 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker c... |
| CVE-2019-3992 | HIGH | 7.5 | 1.3% | Dec 17, 2019 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker c... |
| CVE-2019-17334 | HIGH | 8 | 1.0% | Dec 17, 2019 | The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS ... |
| CVE-2019-19241 | HIGH | 7.8 | 1.1% | Dec 17, 2019 | In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabili... |
| CVE-2019-0384 | HIGH | 8.8 | 0.9% | Dec 17, 2019 | Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-F... |
| CVE-2019-0383 | HIGH | 8.8 | 1.1% | Dec 17, 2019 | Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-F... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now