2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-5636 | HIGH | 7.5 | 1.4% | Nov 21, 2019 | When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the Twi... |
| CVE-2019-19202 | HIGH | 8.8 | 1.0% | Nov 21, 2019 | In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to c... |
| CVE-2019-19197 | HIGH | 7.8 | 0.6% | Nov 21, 2019 | IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escala... |
| CVE-2019-19191 | HIGH | 7.8 | 0.5% | Nov 21, 2019 | Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlle... |
| CVE-2019-16758 | HIGH | 7.5 | 16.8% | Nov 21, 2019 | In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal tech... |
| CVE-2019-16406 | HIGH | 7.8 | 0.5% | Nov 21, 2019 | Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual ma... |
| CVE-2019-16405 | HIGH | 7.2 | 27.0% | Nov 21, 2019 | Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code... |
| CVE-2019-15511 | HIGH | 7.8 | 0.7% | Nov 21, 2019 | An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due t... |
| CVE-2019-5072 | HIGH | 7.8 | 1.8% | Nov 21, 2019 | An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Rout... |
| CVE-2019-5071 | HIGH | 7.8 | 1.7% | Nov 21, 2019 | An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Rout... |
| CVE-2019-10767 | HIGH | 7.5 | 2.2% | Nov 21, 2019 | An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent... |
| CVE-2019-5087 | HIGH | 8.8 | 3.6% | Nov 21, 2019 | An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm bin... |
| CVE-2019-5086 | HIGH | 8.8 | 3.2% | Nov 21, 2019 | An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm bin... |
| CVE-2019-17650 | HIGH | 7.8 | 0.4% | Nov 21, 2019 | An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root pro... |
| CVE-2019-17272 | HIGH | 7.2 | 1.3% | Nov 21, 2019 | All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully ex... |
| CVE-2019-2339 | HIGH | 7.8 | 0.2% | Nov 21, 2019 | Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Au... |
| CVE-2019-2335 | HIGH | 7.5 | 0.6% | Nov 21, 2019 | While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Au... |
| CVE-2019-2329 | HIGH | 7.8 | 0.2% | Nov 21, 2019 | Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application.... |
| CVE-2019-2315 | HIGH | 7.8 | 0.2% | Nov 21, 2019 | While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non sec... |
| CVE-2019-2297 | HIGH | 7.8 | 0.2% | Nov 21, 2019 | Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Cons... |
| CVE-2019-2266 | HIGH | 7.8 | 0.2% | Nov 21, 2019 | Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon A... |
| CVE-2019-2251 | HIGH | 7.8 | 0.2% | Nov 21, 2019 | If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially caus... |
| CVE-2019-18958 | HIGH | 7.8 | 0.5% | Nov 21, 2019 | Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was p... |
| CVE-2019-17421 | HIGH | 7.8 | 0.6% | Nov 21, 2019 | Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall A... |
| CVE-2019-16548 | HIGH | 8.8 | 0.7% | Nov 21, 2019 | A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineClo... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now