2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20827 | CRITICAL | 9.8 | 1.7% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption bec... |
| CVE-2019-20826 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereferen... |
| CVE-2019-20825 | CRITICAL | 9.8 | 1.1% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used. |
| CVE-2019-20824 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub... |
| CVE-2019-20823 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does no... |
| CVE-2019-20822 | CRITICAL | 9.8 | 1.1% | Jun 4, 2020 | An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bound... |
| CVE-2019-20821 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference. |
| CVE-2019-20820 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing ... |
| CVE-2019-20819 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls... |
| CVE-2019-20818 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created ... |
| CVE-2019-20817 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference. |
| CVE-2019-20816 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file ... |
| CVE-2019-20815 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML... |
| CVE-2019-20814 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each... |
| CVE-2019-20813 | HIGH | 7.5 | 1.5% | Jun 4, 2020 | An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference. |
| CVE-2019-16385 | MEDIUM | 6.1 | 0.8% | Jun 4, 2020 | Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer reque... |
| CVE-2019-16384 | MEDIUM | 6.5 | 1.1% | Jun 4, 2020 | Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables file... |
| CVE-2019-16150 | MEDIUM | 5.5 | 1.0% | Jun 4, 2020 | Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClie... |
| CVE-2019-20809 | HIGH | 7.5 | 0.9% | Jun 3, 2020 | The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to s... |
| CVE-2019-19214 | — | — | — | Jun 3, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-19213 | — | — | — | Jun 3, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-20812 | MEDIUM | 5.5 | 0.5% | Jun 3, 2020 | An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet... |
| CVE-2019-20811 | MEDIUM | 5.5 | 0.4% | Jun 3, 2020 | An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in ne... |
| CVE-2019-20810 | MEDIUM | 5.5 | 0.5% | Jun 3, 2020 | go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for ... |
| CVE-2019-11843 | MEDIUM | 6.1 | 1.8% | Jun 2, 2020 | The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using ext... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now