2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-16385 | MEDIUM | 6.1 | 0.8% | Jun 4, 2020 | Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer reque... |
| CVE-2019-16384 | MEDIUM | 6.5 | 1.1% | Jun 4, 2020 | Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables file... |
| CVE-2019-16150 | MEDIUM | 5.5 | 1.0% | Jun 4, 2020 | Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClie... |
| CVE-2019-20809 | HIGH | 7.5 | 0.9% | Jun 3, 2020 | The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to s... |
| CVE-2019-19214 | — | — | — | Jun 3, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-19213 | — | — | — | Jun 3, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-20812 | MEDIUM | 5.5 | 0.5% | Jun 3, 2020 | An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet... |
| CVE-2019-20811 | MEDIUM | 5.5 | 0.4% | Jun 3, 2020 | An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in ne... |
| CVE-2019-20810 | MEDIUM | 5.5 | 0.5% | Jun 3, 2020 | go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for ... |
| CVE-2019-11843 | MEDIUM | 6.1 | 1.8% | Jun 2, 2020 | The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using ext... |
| CVE-2019-17603 | HIGH | 7.8 | 0.7% | Jun 2, 2020 | Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x801020... |
| CVE-2019-14087 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon... |
| CVE-2019-14078 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. i... |
| CVE-2019-14077 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Sn... |
| CVE-2019-14067 | MEDIUM | 5.5 | 0.2% | Jun 2, 2020 | Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing s... |
| CVE-2019-14066 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Number... |
| CVE-2019-14054 | HIGH | 7.8 | 0.2% | Jun 2, 2020 | Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to norma... |
| CVE-2019-14053 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where... |
| CVE-2019-14043 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto... |
| CVE-2019-14042 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in... |
| CVE-2019-14039 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdrago... |
| CVE-2019-14038 | HIGH | 7.1 | 0.2% | Jun 2, 2020 | Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in com... |
| CVE-2019-15709 | MEDIUM | 6.5 | 1.3% | Jun 1, 2020 | An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin consol... |
| CVE-2019-5412 | — | — | — | Jun 1, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-5411 | — | — | — | Jun 1, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now