2019 CVEs (page 11)
Page 11 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-8744 | Medium | 5.5 | 2020-10-27 | A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management. This issue is fixed in macOS Catal… |
CVE-2019-8740 | High | 7.8 | 2020-10-27 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may… |
CVE-2019-8737 | Medium | 6.5 | 2020-10-27 | A denial of service issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update… |
CVE-2019-8736 | Medium | 6.5 | 2020-10-27 | An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security U… |
CVE-2019-8734 | High | 8.8 | 2020-10-27 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7… |
CVE-2019-8732 | Low | 2.4 | 2020-10-27 | The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device. |
CVE-2019-8728 | High | 8.8 | 2020-10-27 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7… |
CVE-2019-8718 | High | 7.8 | 2020-10-27 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute… |
CVE-2019-8716 | Critical | 9.8 | 2020-10-27 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Up… |
CVE-2019-8715 | High | 7.8 | 2020-10-27 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Up… |
CVE-2019-8712 | Critical | 9.8 | 2020-10-27 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute… |
CVE-2019-8709 | High | 7.8 | 2020-10-27 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, tvOS 13, macOS Catalina 10.15.1, Security… |
CVE-2019-8708 | Medium | 5.5 | 2020-10-27 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006… |
CVE-2019-8706 | High | 7.8 | 2020-10-27 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, macOS C… |
CVE-2019-8696 | High | 8.8 | 2020-10-27 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Securit… |
CVE-2019-8675 | High | 8.8 | 2020-10-27 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Securit… |
CVE-2019-8668 | Medium | 5.5 | 2020-10-27 | A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. Processing a maliciously crafted ima… |
CVE-2019-8656 | Medium | 5.5 | 2020-10-27 | This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Mojave 10.14.6, Security Update… |
CVE-2019-8645 | Medium | 6.5 | 2020-10-27 | An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. This issue is fixed in macOS Mojave 10.14… |
CVE-2019-8642 | Low | 3.3 | 2020-10-27 | An issue existed in the handling of S-MIME certificates. This issue was addressed with improved validation of S-MIME certificates. This issue is fixed in macOS… |
CVE-2019-8640 | High | 7.5 | 2020-10-27 | A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-0… |
CVE-2019-8639 | High | 8.8 | 2020-10-27 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 5.2, iCloud for Windows 7.11, iOS 12.2, iTunes 1… |
CVE-2019-8638 | High | 8.8 | 2020-10-27 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 5.2, iCloud for Windows 7.11, iOS 12.2, iTunes 1… |
CVE-2019-8633 | High | 7.5 | 2020-10-27 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security… |
CVE-2019-8631 | High | 7.5 | 2020-10-27 | A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update… |
CVE-2019-8618 | High | 7.5 | 2020-10-27 | A logic issue was addressed with improved restrictions. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Securit… |
CVE-2019-8612 | Medium | 6.5 | 2020-10-27 | A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update… |
CVE-2019-8592 | High | 7.8 | 2020-10-27 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS C… |
CVE-2019-8588 | High | 7.5 | 2020-10-27 | A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Statio… |
CVE-2019-8582 | Medium | 5.5 | 2020-10-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iCloud for Windows 7.12, tvOS 12.3, iTunes 12.9.5 for Windows, macOS… |
CVE-2019-8581 | Critical | 9.8 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Fir… |
CVE-2019-8580 | High | 7.5 | 2020-10-27 | Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7… |
CVE-2019-8579 | High | 7.8 | 2020-10-27 | An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Secur… |
CVE-2019-8578 | Critical | 9.8 | 2020-10-27 | A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station F… |
CVE-2019-8575 | High | 7.5 | 2020-10-27 | The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7… |
CVE-2019-8573 | High | 7.5 | 2020-10-27 | An input validation issue was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Secu… |
CVE-2019-8572 | Critical | 9.8 | 2020-10-27 | A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Statio… |
CVE-2019-8570 | Medium | 6.5 | 2020-10-27 | A logic issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, iCloud for Windows 7.10, iTunes 12.9.3 for Windows, Safari 12.0… |
CVE-2019-8569 | Medium | 6.7 | 2020-10-27 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Secur… |
CVE-2019-8564 | High | 7.5 | 2020-10-27 | A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-0… |
CVE-2019-8547 | Critical | 9.8 | 2020-10-27 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macO… |
CVE-2019-8539 | High | 7.8 | 2020-10-27 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, S… |
CVE-2019-8538 | Medium | 5.5 | 2020-10-27 | A denial of service issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierr… |
CVE-2019-8534 | Medium | 6.7 | 2020-10-27 | A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security… |
CVE-2019-8532 | Medium | 5.5 | 2020-10-27 | A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in watchOS 5.2, iOS 12.2. A malicious applicati… |
CVE-2019-8528 | Medium | 6.7 | 2020-10-27 | A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High S… |
CVE-2019-8525 | Medium | 6.7 | 2020-10-27 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Secu… |
CVE-2019-8509 | High | 7.8 | 2020-10-27 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006… |
CVE-2019-7291 | Medium | 6.5 | 2020-10-27 | A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station… |
CVE-2019-7288 | Critical | 9.8 | 2020-10-27 | The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thoroug… |
CVE-2019-6238 | High | 7.8 | 2020-10-27 | A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.1… |
CVE-2019-14719 | High | 7.8 | 2020-10-23 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager. |
CVE-2019-14718 | Medium | 6.7 | 2020-10-23 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privil… |
CVE-2019-14717 | High | 7.8 | 2020-10-23 | Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call. |
CVE-2019-14716 | Medium | 6.6 | 2020-10-23 | Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out). |
CVE-2019-14715 | Medium | 6.8 | 2020-10-23 | Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation. |
CVE-2019-14713 | Medium | 5.5 | 2020-10-23 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages. |
CVE-2019-14712 | High | 7.8 | 2020-10-23 | Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation. |
CVE-2019-14711 | High | 7.0 | 2020-10-23 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass. |
CVE-2019-17007 | High | 7.5 | 2020-10-22 | In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service. |
CVE-2019-17006 | Critical | 9.8 | 2020-10-22 | In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library… |
CVE-2019-16128 | Medium | 6.8 | 2020-10-22 | Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 1 of 2). |
CVE-2019-16129 | Medium | 6.8 | 2020-10-22 | Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 2 of 2). |
CVE-2019-16127 | Critical | 9.1 | 2020-10-22 | Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow. |
CVE-2019-9080 | High | 7.5 | 2020-10-20 | DomainMOD before 4.14.0 uses MD5 without a salt for password storage. |
CVE-2019-4680 | High | 8.8 | 2020-10-20 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL stateme… |
CVE-2019-13633 | Medium | 6.1 | 2020-10-19 | Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel, such as Teleg… |
CVE-2019-12305 | Medium | 6.5 | 2020-10-16 | In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked to access the administration panel of the device. |
CVE-2019-19885 | Critical | 9.1 | 2020-10-16 | In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write conf… |
CVE-2019-19513 | Critical | 9.8 | 2020-10-16 | The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability. An attacker may exploit this to execut… |
CVE-2019-18796 | Medium | 6.5 | 2020-10-16 | The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This w… |
CVE-2019-18795 | Medium | 6.5 | 2020-10-16 | The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can explo… |
CVE-2019-18794 | Medium | 6.5 | 2020-10-16 | The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit t… |
CVE-2019-17640 | Critical | 9.8 | 2020-10-15 | In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4… |
CVE-2019-4552 | Medium | 6.1 | 2020-10-15 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this… |
CVE-2019-2194 | High | 7.8 | 2020-10-14 | In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation… |
CVE-2019-17444 | Critical | 9.8 | 2020-10-12 | Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorize… |
CVE-2019-19115 | High | 7.8 | 2020-10-08 | An escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2, 1.5.0, 1.5.1, 1.6.1 and 1.6.2 allows an attacker to execute code with… |
CVE-2019-4545 | High | 7.5 | 2020-10-08 | IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks. IBM X-Force ID: 165877. |
CVE-2019-16160 | High | 7.5 | 2020-10-07 | An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service. |
CVE-2019-4326 | High | 7.5 | 2020-10-06 | "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header." |
CVE-2019-4325 | Medium | 5.3 | 2020-10-06 | "HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details." |
CVE-2019-4725 | Medium | 6.1 | 2020-10-06 | IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2019-19200 | High | 8.8 | 2020-10-06 | REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users. |
CVE-2019-14558 | Medium | 5.7 | 2020-10-05 | Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Process… |
CVE-2019-14557 | High | 8.0 | 2020-10-05 | Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an auth… |
CVE-2019-14556 | Medium | 4.4 | 2020-10-05 | Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow… |
CVE-2019-19199 | High | 7.4 | 2020-10-02 | REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout. |
CVE-2019-19393 | Medium | 6.1 | 2020-10-01 | The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurations page. This a… |
CVE-2019-20903 | Medium | 5.4 | 2020-10-01 | The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site… |
CVE-2019-20902 | High | 7.5 | 2020-10-01 | Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3… |
CVE-2019-20922 | High | 7.5 | 2020-09-30 | Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while proc… |
CVE-2019-20921 | Medium | 6.1 | 2020-09-30 | bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbit… |
CVE-2019-20920 | High | 8.1 | 2020-09-30 | Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attack… |
CVE-2019-18991 | Medium | 5.4 | 2020-09-30 | A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sendin… |
CVE-2019-18990 | Medium | 5.4 | 2020-09-30 | A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability… |
CVE-2019-18989 | Medium | 5.4 | 2020-09-30 | A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-pro… |
CVE-2019-17098 | Low | 3.5 | 2020-09-30 | Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload con… |
CVE-2019-16212 | High | 8.8 | 2020-09-25 | A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allo… |
CVE-2019-16211 | Critical | 9.8 | 2020-09-25 | Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability. |