2019 CVEs (page 18)
Page 18 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-14132 | Critical | 9.8 | 2020-04-16 | Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdr… |
CVE-2019-14131 | Critical | 9.8 | 2020-04-16 | Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compu… |
CVE-2019-14127 | Critical | 9.8 | 2020-04-16 | Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-14122 | High | 7.8 | 2020-04-16 | Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentation in Snapdragon Aut… |
CVE-2019-14116 | High | 7.8 | 2020-04-16 | Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot fl… |
CVE-2019-14114 | Critical | 9.8 | 2020-04-16 | Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2019-14113 | Critical | 9.8 | 2020-04-16 | Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto, Snapdrag… |
CVE-2019-14112 | Critical | 9.8 | 2020-04-16 | Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-14111 | Critical | 9.8 | 2020-04-16 | Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C… |
CVE-2019-14110 | Critical | 9.8 | 2020-04-16 | Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP… |
CVE-2019-14105 | High | 7.8 | 2020-04-16 | Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobi… |
CVE-2019-14104 | High | 7.1 | 2020-04-16 | Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before accessing it in Snapdragon Compute, Snapdrago… |
CVE-2019-14075 | Medium | 5.5 | 2020-04-16 | Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag… |
CVE-2019-14070 | High | 7.0 | 2020-04-16 | Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-14033 | Critical | 9.1 | 2020-04-16 | Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto… |
CVE-2019-14022 | High | 7.5 | 2020-04-16 | Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2019-14021 | High | 7.8 | 2020-04-16 | Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in… |
CVE-2019-14020 | Critical | 9.1 | 2020-04-16 | Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notification/ emm_info/ guti_r… |
CVE-2019-14019 | Critical | 9.1 | 2020-04-16 | Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej/Deact EPs… |
CVE-2019-14018 | High | 7.8 | 2020-04-16 | Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind… |
CVE-2019-14012 | High | 7.5 | 2020-04-16 | Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in Snapdra… |
CVE-2019-14011 | Critical | 9.1 | 2020-04-16 | Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify conte… |
CVE-2019-14009 | High | 7.8 | 2020-04-16 | Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Snapdragon Auto, Snapd… |
CVE-2019-14007 | Medium | 5.5 | 2020-04-16 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruptio… |
CVE-2019-14001 | High | 7.8 | 2020-04-16 | Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile… |
CVE-2019-10625 | High | 7.1 | 2020-04-16 | Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2019-10624 | High | 7.8 | 2020-04-16 | While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 data type in Snapdr… |
CVE-2019-10623 | High | 7.1 | 2020-04-16 | Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in Snapdragon Auto, Sn… |
CVE-2019-10622 | Critical | 9.1 | 2020-04-16 | Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon… |
CVE-2019-10621 | High | 7.8 | 2020-04-16 | Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10620 | High | 7.8 | 2020-04-16 | Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Co… |
CVE-2019-10610 | Critical | 9.1 | 2020-04-16 | Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Comp… |
CVE-2019-10609 | Critical | 9.8 | 2020-04-16 | Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-10608 | Medium | 5.5 | 2020-04-16 | Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of… |
CVE-2019-10589 | Critical | 9.8 | 2020-04-16 | Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2019-10588 | Critical | 9.8 | 2020-04-16 | Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon Auto, Snap… |
CVE-2019-10575 | High | 7.8 | 2020-04-16 | Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon Compute, Snapdragon Consumer IOT, Snapdr… |
CVE-2019-10574 | High | 7.1 | 2020-04-16 | Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2019-10556 | High | 7.8 | 2020-04-16 | Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon A… |
CVE-2019-10551 | Critical | 9.1 | 2020-04-16 | String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10547 | High | 7.8 | 2020-04-16 | When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2019-10523 | Medium | 5.5 | 2020-04-16 | Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrag… |
CVE-2019-10483 | Medium | 5.5 | 2020-04-16 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2019-20681 | High | 8.8 | 2020-04-15 | Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 befor… |
CVE-2019-20680 | High | 8.0 | 2020-04-15 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000v2 before 1.0.0.53, R6220 before 1.1.0.80, R6260 before 1… |
CVE-2019-20679 | Critical | 9.8 | 2020-04-15 | NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level. |
CVE-2019-20678 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20677 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20676 | Medium | 6.0 | 2020-04-15 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE b… |
CVE-2019-20675 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20674 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20673 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20672 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20671 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20670 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20669 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20668 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20667 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20666 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20665 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20664 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-12520 | High | 7.5 | 2020-04-15 | An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does this by maki… |
CVE-2019-12519 | Critical | 9.8 | 2020-04-15 | An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpression::Evaluate. This function uses a fix… |
CVE-2019-20663 | Medium | 4.3 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20662 | Medium | 4.3 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20661 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20660 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RB… |
CVE-2019-20659 | High | 7.2 | 2020-04-15 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700v3 before… |
CVE-2019-20658 | Medium | 6.5 | 2020-04-15 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6… |
CVE-2019-20657 | High | 8.0 | 2020-04-15 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1… |
CVE-2019-20656 | High | 8.8 | 2020-04-15 | Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before… |
CVE-2019-20655 | High | 7.8 | 2020-04-15 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR500 before 2.3.2.56 and XR700 before 1.0.1.20. |
CVE-2019-20654 | High | 7.5 | 2020-04-15 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4. |
CVE-2019-20653 | Medium | 6.5 | 2020-04-15 | Certain NETGEAR devices are affected by denial of service. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4. |
CVE-2019-20652 | Medium | 6.5 | 2020-04-15 | NETGEAR WAC505 devices before 8.2.1.16 are affected by disclosure of sensitive information. |
CVE-2019-20651 | Medium | 6.7 | 2020-04-15 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 8.2.1.16 and WAC510 before 8.2.1.16. |
CVE-2019-12524 | Critical | 9.8 | 2020-04-15 | An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the request should be denied. Squid by defaul… |
CVE-2019-12522 | Medium | 4.5 | 2020-04-15 | An issue was discovered in Squid through 4.7. When Squid is run as root, it spawns its child processes as a lesser user, by default the user nobody. This is do… |
CVE-2019-12521 | Medium | 5.9 | 2020-04-15 | An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a st… |
CVE-2019-20650 | High | 7.5 | 2020-04-15 | Certain NETGEAR devices are affected by denial of service. This affects R8900 before 1.0.5.2, R9000 before 1.0.5.2, XR500 before 2.3.2.56, and XR700 before 1.0… |
CVE-2019-20649 | High | 7.5 | 2020-04-15 | NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information. |
CVE-2019-20648 | Low | 3.5 | 2020-04-15 | NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings. |
CVE-2019-20647 | Medium | 5.7 | 2020-04-15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service. |
CVE-2019-20646 | Critical | 9.8 | 2020-04-15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. |
CVE-2019-20645 | Medium | 4.8 | 2020-04-15 | NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. |
CVE-2019-20644 | Medium | 4.8 | 2020-04-15 | NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. |
CVE-2019-20643 | High | 7.5 | 2020-04-15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information. |
CVE-2019-20642 | High | 8.0 | 2020-04-15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass. |
CVE-2019-20641 | High | 8.8 | 2020-04-15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. |
CVE-2019-20640 | High | 8.8 | 2020-04-15 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76… |
CVE-2019-20639 | Medium | 4.8 | 2020-04-15 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. |
CVE-2019-20638 | Medium | 6.5 | 2020-04-15 | NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials. |
CVE-2019-19390 | Medium | 5.4 | 2020-04-15 | The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multipl… |
CVE-2019-4654 | Medium | 4.8 | 2020-04-15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a… |
CVE-2019-4594 | Medium | 5.9 | 2020-04-15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport… |
CVE-2019-4593 | Medium | 4.3 | 2020-04-15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM… |
CVE-2019-2880 | High | 8.8 | 2020-04-15 | Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications (component: Security). The supported version that is affect… |
CVE-2019-20767 | High | 7.2 | 2020-04-15 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.60, D3600 before 1.0.0.75, D600… |
CVE-2019-19500 | Medium | 5.4 | 2020-04-15 | Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment field of a special o… |
CVE-2019-19301 | High | 7.5 | 2020-04-14 | A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE… |