2019 CVEs (page 38)
Page 38 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-5074 | Critical | 9.8 | 2019-12-18 | An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAG… |
CVE-2019-19690 | Critical | 9.8 | 2019-12-18 | Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App P… |
CVE-2019-19689 | High | 7.8 | 2019-12-18 | Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL Hijack related to a vulnerability on the packer that the progr… |
CVE-2019-19688 | High | 7.8 | 2019-12-18 | A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited allowing an attacker to place a… |
CVE-2019-18267 | Medium | 5.4 | 2019-12-18 | An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript i… |
CVE-2019-16782 | Medium | 6.3 | 2019-12-18 | There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attacker… |
CVE-2019-11995 | High | 7.5 | 2019-12-18 | Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issue in HPE U… |
CVE-2019-19890 | High | 7.5 | 2019-12-18 | An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin credentials are sent over cleartext HTTP. |
CVE-2019-19889 | High | 7.5 | 2019-12-18 | An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. The attacker can discover admin credentials in the backup file, aka bac… |
CVE-2019-19888 | Medium | 6.5 | 2019-12-18 | jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error. |
CVE-2019-19887 | Medium | 6.5 | 2019-12-18 | bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode. |
CVE-2019-19844 | Critical | 9.8 | 2019-12-18 | Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's em… |
CVE-2019-8849 | Critical | 9.8 | 2019-12-18 | The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1. A SwiftNIO application using TLS may… |
CVE-2019-8823 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTun… |
CVE-2019-8822 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTun… |
CVE-2019-8821 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTun… |
CVE-2019-8820 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari… |
CVE-2019-8819 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTun… |
CVE-2019-8817 | Medium | 5.5 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.1. An application may be able to read restricted… |
CVE-2019-8816 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari… |
CVE-2019-8815 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTun… |
CVE-2019-8814 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTun… |
CVE-2019-8813 | Medium | 6.1 | 2019-12-18 | A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10… |
CVE-2019-8812 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari… |
CVE-2019-8811 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari… |
CVE-2019-8808 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari… |
CVE-2019-8807 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arb… |
CVE-2019-8806 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrar… |
CVE-2019-8805 | High | 7.8 | 2019-12-18 | A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed i… |
CVE-2019-8804 | Medium | 5.7 | 2019-12-18 | An inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in iOS 13.2 and iPadOS 13.2. An attacker in physical proximity may… |
CVE-2019-8803 | High | 8.4 | 2019-12-18 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watch… |
CVE-2019-8802 | High | 7.8 | 2019-12-18 | A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious application may be able to gain root privilege… |
CVE-2019-8801 | High | 7.8 | 2019-12-18 | A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes… |
CVE-2019-8800 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrar… |
CVE-2019-8798 | Medium | 5.5 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watc… |
CVE-2019-8797 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watc… |
CVE-2019-8795 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2. An application may be able t… |
CVE-2019-8794 | Medium | 5.5 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS… |
CVE-2019-8793 | Medium | 5.5 | 2019-12-18 | A consistency issue existed in deciding when to show the screen recording indicator. The issue was resolved with improved state management. This issue is fixed… |
CVE-2019-8792 | High | 8.8 | 2019-12-18 | An injection issue was addressed with improved validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing… |
CVE-2019-8791 | Medium | 6.1 | 2019-12-18 | An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fixed in Shazam Android App Version 9.25.0… |
CVE-2019-8789 | Medium | 5.5 | 2019-12-18 | A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 13.2 and iPad… |
CVE-2019-8788 | High | 7.5 | 2019-12-18 | An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catali… |
CVE-2019-8787 | High | 7.5 | 2019-12-18 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS… |
CVE-2019-8786 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watc… |
CVE-2019-8785 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watc… |
CVE-2019-8784 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Wind… |
CVE-2019-8783 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTun… |
CVE-2019-8782 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTun… |
CVE-2019-8781 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbi… |
CVE-2019-8779 | Critical | 10.0 | 2019-12-18 | A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS… |
CVE-2019-8775 | Low | 2.4 | 2019-12-18 | The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an… |
CVE-2019-8772 | High | 7.5 | 2019-12-18 | An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt. This issue is fixed in macOS Catalina 10… |
CVE-2019-8770 | Medium | 5.5 | 2019-12-18 | The issue was addressed with improved permissions logic. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access recent docu… |
CVE-2019-8769 | Medium | 4.3 | 2019-12-18 | An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catal… |
CVE-2019-8768 | Medium | 5.3 | 2019-12-18 | "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A… |
CVE-2019-8766 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing malicio… |
CVE-2019-8765 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content… |
CVE-2019-8764 | Medium | 6.1 | 2019-12-18 | A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universa… |
CVE-2019-8763 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13, Safari 13.0.1, iTunes… |
CVE-2019-8760 | Medium | 6.8 | 2019-12-18 | This issue was addressed by improving Face ID machine learning models. This issue is fixed in iOS 13. A 3D model constructed to look like the enrolled user may… |
CVE-2019-8758 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbit… |
CVE-2019-8757 | Low | 2.5 | 2019-12-18 | A race condition existed when reading and writing user preferences. This was addressed with improved state handling. This issue is fixed in macOS Catalina 10.1… |
CVE-2019-8755 | High | 7.8 | 2019-12-18 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to determine kernel me… |
CVE-2019-8750 | Critical | 9.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Multiple issues i… |
CVE-2019-8748 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbit… |
CVE-2019-8747 | High | 7.8 | 2019-12-18 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in watchOS 6.1. An application may be able to execute arbitrary code… |
CVE-2019-8745 | High | 8.8 | 2019-12-18 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Win… |
CVE-2019-8743 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content… |
CVE-2019-8742 | Low | 2.4 | 2019-12-18 | The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be… |
CVE-2019-8739 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to ar… |
CVE-2019-8738 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to ar… |
CVE-2019-8735 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows… |
CVE-2019-8733 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows… |
CVE-2019-8731 | Medium | 5.5 | 2019-12-18 | A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue is fi… |
CVE-2019-8730 | Low | 3.3 | 2019-12-18 | The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed in macOS Catalina 1… |
CVE-2019-8727 | Medium | 4.3 | 2019-12-18 | A logic issue was addressed with improved state management. This issue is fixed in iOS 13. Visiting a malicious website may lead to address bar spoofing. |
CVE-2019-8726 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows… |
CVE-2019-8725 | Medium | 5.3 | 2019-12-18 | The issue was addressed with improved handling of service worker lifetime. This issue is fixed in Safari 13.0.1. Service workers may leak private browsing hist… |
CVE-2019-8724 | High | 8.8 | 2019-12-18 | Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without pro… |
CVE-2019-8723 | High | 8.8 | 2019-12-18 | Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without pro… |
CVE-2019-8722 | High | 8.8 | 2019-12-18 | Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without pro… |
CVE-2019-8721 | High | 8.8 | 2019-12-18 | Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without pro… |
CVE-2019-8719 | Medium | 6.1 | 2019-12-18 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Win… |
CVE-2019-8717 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to exec… |
CVE-2019-8711 | Medium | 5.3 | 2019-12-18 | A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification… |
CVE-2019-8710 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windows 11.0. Processing maliciously crafted… |
CVE-2019-8707 | High | 8.8 | 2019-12-18 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows… |
CVE-2019-8705 | Medium | 5.5 | 2019-12-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15, tvOS 13. Processing a maliciously crafted movie… |
CVE-2019-8704 | Medium | 5.5 | 2019-12-18 | An authentication issue was addressed with improved state management. This issue is fixed in tvOS 13. A local user may be able to leak sensitive user informati… |
CVE-2019-8701 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbit… |
CVE-2019-8699 | High | 7.5 | 2019-12-18 | A logic issue existed in the handling of answering phone calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4. The in… |
CVE-2019-8698 | Low | 3.3 | 2019-12-18 | A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed i… |
CVE-2019-8697 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbit… |
CVE-2019-8695 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbit… |
CVE-2019-8694 | High | 7.8 | 2019-12-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbit… |
CVE-2019-8693 | Medium | 5.5 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted m… |
CVE-2019-8692 | Medium | 5.5 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted m… |
CVE-2019-8691 | Medium | 5.5 | 2019-12-18 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted m… |
CVE-2019-8690 | Medium | 6.1 | 2019-12-18 | A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave… |