# CVEs published 2019-02-19

38 CVEs were published on February 19, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2018-20025](https://cve.now/CVE-2018-20025.md): Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. (no CVSS, Kaspersky Lab CODESYS V3 products)
- [CVE-2018-20026](https://cve.now/CVE-2018-20026.md): Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. (no CVSS, Kaspersky Lab CODESYS V3 products)
- [CVE-2018-9867](https://cve.now/CVE-2018-9867.md): In SonicWall SonicOS, administrators without full permissions can download imported certificates. (no CVSS, SonicWall SonicOS · SonicWall SonicOSv)
- [CVE-2018-1996](https://cve.now/CVE-2018-1996.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuratio (CVSS 5.3, IBM WebSphere Application Server)
- [CVE-2019-5754](https://cve.now/CVE-2019-5754.md): Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy s (no CVSS, Google Chrome)
- [CVE-2019-5755](https://cve.now/CVE-2019-5755.md): Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write v (no CVSS, Google Chrome)
- [CVE-2019-5756](https://cve.now/CVE-2019-5756.md): Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary (no CVSS, Google Chrome)
- [CVE-2019-5757](https://cve.now/CVE-2019-5757.md): An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object co (no CVSS, Google Chrome)
- [CVE-2019-5758](https://cve.now/CVE-2019-5758.md): Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap (no CVSS, Google Chrome)
- [CVE-2019-5759](https://cve.now/CVE-2019-5759.md): Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to p (no CVSS, Google Chrome)
- [CVE-2019-5760](https://cve.now/CVE-2019-5760.md): Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit he (no CVSS, Google Chrome)
- [CVE-2019-5761](https://cve.now/CVE-2019-5761.md): Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit (no CVSS, Google Chrome)
- [CVE-2019-5762](https://cve.now/CVE-2019-5762.md): Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary (no CVSS, Google Chrome)
- [CVE-2019-5763](https://cve.now/CVE-2019-5763.md): Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corrupt (no CVSS, Google Chrome)
- [CVE-2019-5764](https://cve.now/CVE-2019-5764.md): Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corrupti (no CVSS, Google Chrome)
- [CVE-2019-5765](https://cve.now/CVE-2019-5765.md): An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentiall (no CVSS, Google Chrome)
- [CVE-2019-5766](https://cve.now/CVE-2019-5766.md): Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin (no CVSS, Google Chrome)
- [CVE-2019-5767](https://cve.now/CVE-2019-5767.md): Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the (no CVSS, Google Chrome)
- [CVE-2019-5768](https://cve.now/CVE-2019-5768.md): DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinc (no CVSS, Google Chrome)
- [CVE-2019-5769](https://cve.now/CVE-2019-5769.md): Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote a (no CVSS, Google Chrome)
- [CVE-2019-5770](https://cve.now/CVE-2019-5770.md): Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory r (no CVSS, Google Chrome)
- [CVE-2019-5771](https://cve.now/CVE-2019-5771.md): An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code v (no CVSS, Google Chrome)
- [CVE-2019-5772](https://cve.now/CVE-2019-5772.md): Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentia (no CVSS, Google Chrome)
- [CVE-2019-5773](https://cve.now/CVE-2019-5773.md): Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the rendere (no CVSS, Google Chrome)
- [CVE-2019-5774](https://cve.now/CVE-2019-5774.md): Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed a (no CVSS, Google Chrome)
- [CVE-2019-5775](https://cve.now/CVE-2019-5775.md): Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the conten (no CVSS, Google Chrome)
- [CVE-2019-5776](https://cve.now/CVE-2019-5776.md): Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the conten (no CVSS, Google Chrome)
- [CVE-2019-5777](https://cve.now/CVE-2019-5777.md): Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the conten (no CVSS, Google Chrome)
- [CVE-2019-5778](https://cve.now/CVE-2019-5778.md): A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an att (no CVSS, Google Chrome)
- [CVE-2019-5779](https://cve.now/CVE-2019-5779.md): Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restri (no CVSS, Google Chrome)
- [CVE-2019-5780](https://cve.now/CVE-2019-5780.md): Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to (no CVSS, Google Chrome)
- [CVE-2019-5781](https://cve.now/CVE-2019-5781.md): Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the conten (no CVSS, Google Chrome)
- [CVE-2019-5782](https://cve.now/CVE-2019-5782.md): Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a (no CVSS, Google Chrome)
- [CVE-2019-5783](https://cve.now/CVE-2019-5783.md): Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling M (no CVSS, Google Chrome)
- [CVE-2019-8939](https://cve.now/CVE-2019-8939.md): data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History (no CVSS)
- [CVE-2019-8935](https://cve.now/CVE-2019-8935.md): Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter. (no CVSS)
- [CVE-2019-3812](https://cve.now/CVE-2019-3812.md): QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c\_ (CVSS 4.4, The QEMU Project qemu)
- [CVE-2019-8933](https://cve.now/CVE-2019-8933.md): In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-02-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.