2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-4366 | MEDIUM | 5.3 | 0.7% | Aug 3, 2020 | IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gai... |
| CVE-2019-11286 | CRITICAL | 9.1 | 1.8% | Jul 31, 2020 | VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.1... |
| CVE-2019-14130 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in S... |
| CVE-2019-14124 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Co... |
| CVE-2019-14123 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HL... |
| CVE-2019-14101 | HIGH | 7.1 | 0.2% | Jul 30, 2020 | Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is... |
| CVE-2019-14100 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdrago... |
| CVE-2019-14099 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdra... |
| CVE-2019-14093 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon ... |
| CVE-2019-14037 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Comput... |
| CVE-2019-10580 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been a... |
| CVE-2019-20033 | CRITICAL | 9.8 | 1.1% | Jul 29, 2020 | On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may... |
| CVE-2019-20032 | MEDIUM | 6.5 | 0.7% | Jul 29, 2020 | An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBX... |
| CVE-2019-20031 | CRITICAL | 9.1 | 1.0% | Jul 29, 2020 | NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number... |
| CVE-2019-20030 | HIGH | 7.8 | 0.3% | Jul 29, 2020 | An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard... |
| CVE-2019-20029 | HIGH | 8.8 | 1.6% | Jul 29, 2020 | An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, includ... |
| CVE-2019-20028 | HIGH | 7.5 | 1.1% | Jul 29, 2020 | Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices ... |
| CVE-2019-20027 | CRITICAL | 9.8 | 1.4% | Jul 29, 2020 | Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain t... |
| CVE-2019-20026 | HIGH | 7.5 | 1.1% | Jul 29, 2020 | The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all ... |
| CVE-2019-20025 | CRITICAL | 9.8 | 2.9% | Jul 29, 2020 | Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an af... |
| CVE-2019-4731 | MEDIUM | 5.5 | 0.3% | Jul 28, 2020 | IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive ... |
| CVE-2019-18834 | MEDIUM | 6.1 | 1.6% | Jul 23, 2020 | Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arb... |
| CVE-2019-11252 | MEDIUM | 6.5 | 1.1% | Jul 23, 2020 | The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages i... |
| CVE-2019-16244 | CRITICAL | 9.8 | 1.2% | Jul 22, 2020 | OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query. |
| CVE-2019-18619 | HIGH | 7.8 | 0.5% | Jul 22, 2020 | Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prio... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now