2019 CVEs (page 76)
Page 76 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-2188 | Medium | 6.4 | 2019-09-27 | In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privile… |
CVE-2019-2172 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2171 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2170 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2169 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2168 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2167 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2166 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2165 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2164 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2163 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2162 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution… |
CVE-2019-2161 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2160 | Medium | 6.5 | 2019-09-27 | In libxaac there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privile… |
CVE-2019-2159 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2158 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2157 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2156 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2155 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2154 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2153 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2152 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2151 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2150 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2149 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2148 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2147 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2146 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2145 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2144 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2143 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2142 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2141 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2140 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2139 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2138 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2087 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2086 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2085 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2084 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2083 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2082 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2081 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2080 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2079 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2078 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2077 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2076 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2075 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2074 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2073 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write to missing bounds check. This could lead to remote code execution with no additional execution privileges ne… |
CVE-2019-2072 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2071 | High | 8.8 | 2019-09-27 | In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2070 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2069 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2068 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2067 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2066 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2065 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2064 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2063 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media server with no additio… |
CVE-2019-2062 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2061 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2060 | Medium | 6.5 | 2019-09-27 | In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclosure with no additional execution privil… |
CVE-2019-2059 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-2055 | High | 8.8 | 2019-09-27 | In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privil… |
CVE-2019-16924 | High | 8.8 | 2019-09-27 | The Nulock application 1.5.0 for mobile devices sends a cleartext password over Bluetooth, which allows remote attackers (after sniffing the network) to take c… |
CVE-2019-11755 | High | 7.5 | 2019-09-27 | A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the sign… |
CVE-2019-11754 | Medium | 4.3 | 2019-09-27 | When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mo… |
CVE-2019-11753 | High | 7.8 | 2019-09-27 | The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malw… |
CVE-2019-11752 | High | 8.8 | 2019-09-27 | It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploi… |
CVE-2019-11751 | High | 8.8 | 2019-09-27 | Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links i… |
CVE-2019-11750 | Medium | 6.5 | 2019-09-27 | A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1. |
CVE-2019-11749 | Medium | 4.3 | 2019-09-27 | A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties o… |
CVE-2019-11748 | Medium | 6.5 | 2019-09-27 | WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of… |
CVE-2019-11747 | Medium | 6.5 | 2019-09-27 | The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site. This includes remo… |
CVE-2019-11746 | High | 8.8 | 2019-09-27 | A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable c… |
CVE-2019-11744 | Medium | 6.1 | 2019-09-27 | Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them as markup. It is possible to pass a li… |
CVE-2019-11743 | Low | 3.7 | 2019-09-27 | Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts… |
CVE-2019-11742 | Medium | 6.5 | 2019-09-27 | A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canvas> element due to an err… |
CVE-2019-11741 | Medium | 6.1 | 2019-09-27 | A compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS) attack on content from any site it can cause to be loaded in the sa… |
CVE-2019-11740 | High | 8.8 | 2019-09-27 | Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidenc… |
CVE-2019-11739 | Medium | 6.5 | 2019-09-27 | Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunde… |
CVE-2019-11738 | Medium | 6.3 | 2019-09-27 | If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs w… |
CVE-2019-11737 | Medium | 5.3 | 2019-09-27 | If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leadi… |
CVE-2019-11736 | High | 7.0 | 2019-09-27 | The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local f… |
CVE-2019-11735 | High | 8.8 | 2019-09-27 | Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of these bugs showed evidence of memory cor… |
CVE-2019-11734 | Critical | 9.8 | 2019-09-27 | Mozilla developers and community members reported memory safety bugs present in Firefox 68. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2019-11733 | Critical | 9.8 | 2019-09-27 | When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that local… |
CVE-2019-16923 | Medium | 6.1 | 2019-09-27 | kkcms 1.3 has jx.php?url= XSS. |
CVE-2019-9853 | High | 7.8 | 2019-09-27 | LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically execution of macros are bloc… |
CVE-2019-8075 | High | 7.5 | 2019-09-27 | Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Di… |
CVE-2019-8074 | Critical | 9.8 | 2019-09-27 | ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability. Successful exploitation could lead to Acc… |
CVE-2019-8073 | Critical | 9.8 | 2019-09-27 | ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Command Injection via Vulnerable component vulnerability. Successful ex… |
CVE-2019-8072 | High | 7.5 | 2019-09-27 | ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. Successful exploitation could lead to In… |
CVE-2019-16922 | Medium | 5.3 | 2019-09-27 | SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files. |
CVE-2019-4141 | Medium | 6.5 | 2019-09-27 | IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service a… |
CVE-2019-16921 | High | 7.5 | 2019-09-27 | In the Linux kernel before 4.17, hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c does not initialize the resp data structure, which might… |
CVE-2019-13376 | Medium | 6.5 | 2019-09-27 | phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. The CSRF Token Hijacking… |
CVE-2019-16920 | Critical | 9.8 | 2019-09-27 | Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an… |