2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14251 | HIGH | 7.5 | 7.8% | Dec 9, 2019 | An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a docu... |
| CVE-2019-19648 | HIGH | 7.8 | 1.6% | Dec 9, 2019 | In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real si... |
| CVE-2019-19647 | HIGH | 7.8 | 1.6% | Dec 9, 2019 | radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ul... |
| CVE-2019-19642 | HIGH | 8.8 | 19.0% | Dec 8, 2019 | On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command I... |
| CVE-2019-19630 | HIGH | 7.8 | 1.1% | Dec 8, 2019 | HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_con... |
| CVE-2019-19449 | HIGH | 7.8 | 2.0% | Dec 8, 2019 | In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_... |
| CVE-2019-19448 | HIGH | 7.8 | 2.2% | Dec 8, 2019 | In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then m... |
| CVE-2019-19447 | HIGH | 7.8 | 3.5% | Dec 8, 2019 | In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lea... |
| CVE-2019-2232 | HIGH | 7.5 | 1.1% | Dec 6, 2019 | In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead t... |
| CVE-2019-2230 | HIGH | 7.5 | 0.8% | Dec 6, 2019 | In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use af... |
| CVE-2019-2225 | HIGH | 8.8 | 0.4% | Dec 6, 2019 | When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the us... |
| CVE-2019-2223 | HIGH | 7.8 | 0.6% | Dec 6, 2019 | In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This cou... |
| CVE-2019-2222 | HIGH | 7.8 | 0.6% | Dec 6, 2019 | n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check... |
| CVE-2019-2221 | HIGH | 7.8 | 0.2% | Dec 6, 2019 | In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements d... |
| CVE-2019-2218 | HIGH | 7.8 | 0.2% | Dec 6, 2019 | In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing... |
| CVE-2019-2217 | HIGH | 7.8 | 0.2% | Dec 6, 2019 | In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to lo... |
| CVE-2019-18575 | HIGH | 7.1 | 0.3% | Dec 6, 2019 | Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticate... |
| CVE-2019-18672 | HIGH | 7.5 | 0.8% | Dec 6, 2019 | Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a ... |
| CVE-2019-12734 | HIGH | 8.8 | 2.1% | Dec 6, 2019 | SiteVision 4 has Incorrect Access Control. |
| CVE-2019-12733 | HIGH | 8.8 | 6.0% | Dec 6, 2019 | SiteVision 4 allows Remote Code Execution. |
| CVE-2019-19609 | HIGH | 7.2 | 54.1% | Dec 5, 2019 | The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c... |
| CVE-2019-16770 | HIGH | 7.5 | 1.9% | Dec 5, 2019 | In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reac... |
| CVE-2019-5098 | HIGH | 8.6 | 2.0% | Dec 5, 2019 | An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A speciall... |
| CVE-2019-17388 | HIGH | 7.8 | 0.6% | Dec 5, 2019 | Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allo... |
| CVE-2019-17387 | HIGH | 7.8 | 0.7% | Dec 5, 2019 | An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now