2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-2321 | HIGH | 7.8 | 0.2% | Dec 12, 2019 | Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Sna... |
| CVE-2019-2319 | HIGH | 7.8 | 0.2% | Dec 12, 2019 | HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv... |
| CVE-2019-2310 | HIGH | 7.5 | 0.7% | Dec 12, 2019 | Out of bound read would occur while trying to read action category and action ID without validating the action length of... |
| CVE-2019-2288 | HIGH | 7.8 | 0.2% | Dec 12, 2019 | Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Sna... |
| CVE-2019-10592 | HIGH | 7.8 | 0.2% | Dec 12, 2019 | Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check... |
| CVE-2019-10571 | HIGH | 7.8 | 0.2% | Dec 12, 2019 | Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Au... |
| CVE-2019-10555 | HIGH | 7.8 | 0.2% | Dec 12, 2019 | Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdrag... |
| CVE-2019-10530 | HIGH | 7.8 | 0.2% | Dec 12, 2019 | Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon... |
| CVE-2019-10494 | HIGH | 8.1 | 0.3% | Dec 12, 2019 | Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF is... |
| CVE-2019-10485 | HIGH | 7.5 | 0.7% | Dec 12, 2019 | Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapd... |
| CVE-2019-19726 | HIGH | 7.8 | 3.5% | Dec 12, 2019 | OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be... |
| CVE-2019-5154 | HIGH | 8.8 | 2.6% | Dec 12, 2019 | An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A s... |
| CVE-2019-5092 | HIGH | 8.8 | 2.5% | Dec 12, 2019 | An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image form... |
| CVE-2019-5091 | HIGH | 7.5 | 1.9% | Dec 12, 2019 | An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so... |
| CVE-2019-5090 | HIGH | 7.5 | 2.3% | Dec 12, 2019 | An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltd... |
| CVE-2019-3988 | HIGH | 8.8 | 1.7% | Dec 11, 2019 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due ... |
| CVE-2019-3987 | HIGH | 8.8 | 1.7% | Dec 11, 2019 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due ... |
| CVE-2019-3986 | HIGH | 8.8 | 1.2% | Dec 11, 2019 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due ... |
| CVE-2019-3985 | HIGH | 8.8 | 1.7% | Dec 11, 2019 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due ... |
| CVE-2019-18245 | HIGH | 7.8 | 0.4% | Dec 11, 2019 | Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into th... |
| CVE-2019-18232 | HIGH | 7.8 | 0.4% | Dec 11, 2019 | SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulne... |
| CVE-2019-17087 | HIGH | 7.5 | 1.1% | Dec 11, 2019 | Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be e... |
| CVE-2019-0405 | HIGH | 7.5 | 1.1% | Dec 11, 2019 | SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to con... |
| CVE-2019-0404 | HIGH | 7.5 | 1.1% | Dec 11, 2019 | SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading... |
| CVE-2019-0398 | HIGH | 8.8 | 0.5% | Dec 11, 2019 | Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now