# CVEs published 2019-09-27

311 CVEs were published on September 27, 2019: 3 critical, 3 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2019-16925](https://cve.now/CVE-2019-16925.md): Flower 0.9.3 has XSS via the name parameter in an @app.task call. (no CVSS)
- [CVE-2019-16926](https://cve.now/CVE-2019-16926.md): Flower 0.9.3 has XSS via a crafted worker name. (no CVSS)
- [CVE-2019-3766](https://cve.now/CVE-2019-3766.md): Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. (CVSS 8.1, Dell Elastic Cloud Storage)
- [CVE-2019-3747](https://cve.now/CVE-2019-3747.md): Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. (CVSS 8.4, Dell Integrated Data Protection Appliance)
- [CVE-2019-3746](https://cve.now/CVE-2019-3746.md): Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. (CVSS 9.8, Dell Integrated Data Protection Appliance)
- [CVE-2019-3736](https://cve.now/CVE-2019-3736.md): Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. (CVSS 8.2, Dell Integrated Data Protection Appliance)
- [CVE-2019-11927](https://cve.now/CVE-2019-11927.md): An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially (no CVSS, Facebook WhatsApp for Android · Facebook WhatsApp for iOS)
- [CVE-2019-16928](https://cve.now/CVE-2019-16928.md): Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. (CVSS 9.8, KEV)
- [CVE-2019-16927](https://cve.now/CVE-2019-16927.md): Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerab (no CVSS)
- [CVE-2019-16688](https://cve.now/CVE-2019-16688.md): Dolibarr 9.0.5 has stored XSS in an Email Template section to mails\_templates.php. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-16687](https://cve.now/CVE-2019-16687.md): Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-16686](https://cve.now/CVE-2019-16686.md): Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-16685](https://cve.now/CVE-2019-16685.md): Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-2188](https://cve.now/CVE-2019-2188.md): In the Easel driver, there is possible memory corruption due to race conditions. (no CVSS, Android)
- [CVE-2019-2189](https://cve.now/CVE-2019-2189.md): In the Easel driver, there is possible memory corruption due to race conditions. (no CVSS, Android)
- [CVE-2019-2190](https://cve.now/CVE-2019-2190.md): In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2191](https://cve.now/CVE-2019-2191.md): In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. (no CVSS, Android)
- [CVE-2018-9425](https://cve.now/CVE-2018-9425.md): In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. (no CVSS, Android)
- [CVE-2018-9581](https://cve.now/CVE-2018-9581.md): In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSI\_CHANGE and android.net.wifi.STATE\_CHANGE intents. (no CVSS, Android)
- [CVE-2019-9438](https://cve.now/CVE-2019-9438.md): In the Package Manager service, there is a possible information disclosure due to a confused deputy. (no CVSS, Android)
- [CVE-2019-9440](https://cve.now/CVE-2019-9440.md): In AOSP Email, there is a possible information disclosure due to a confused deputy. (no CVSS, Android)
- [CVE-2019-9459](https://cve.now/CVE-2019-9459.md): In libttspico, there is a possible OOB write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2019-9462](https://cve.now/CVE-2019-9462.md): In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2019-9463](https://cve.now/CVE-2019-9463.md): In Platform, there is a possible bypass of user interaction requirements due to background app interception. (no CVSS, Android)
- [CVE-2019-9404](https://cve.now/CVE-2019-9404.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9405](https://cve.now/CVE-2019-9405.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9406](https://cve.now/CVE-2019-9406.md): In libhevc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9407](https://cve.now/CVE-2019-9407.md): In notification management of the service manager, there is a possible permissions bypass. (no CVSS, Android)
- [CVE-2019-9408](https://cve.now/CVE-2019-9408.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9409](https://cve.now/CVE-2019-9409.md): In libhevc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9410](https://cve.now/CVE-2019-9410.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9411](https://cve.now/CVE-2019-9411.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9412](https://cve.now/CVE-2019-9412.md): In libSBRdec there is a possible out of bounds read due to incorrect bounds check. (no CVSS, Android)
- [CVE-2019-9413](https://cve.now/CVE-2019-9413.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9414](https://cve.now/CVE-2019-9414.md): In wpa\_supplicant, there is a possible man in the middle vulnerability due to improper input validation of the basicConstraints field of int (no CVSS, Android)
- [CVE-2019-9415](https://cve.now/CVE-2019-9415.md): In libstagefright there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9416](https://cve.now/CVE-2019-9416.md): In libstagefright there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9417](https://cve.now/CVE-2019-9417.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9418](https://cve.now/CVE-2019-9418.md): In libstagefright, there is a possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9419](https://cve.now/CVE-2019-9419.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9420](https://cve.now/CVE-2019-9420.md): In libhevc, there is a possible out of bounds read due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9421](https://cve.now/CVE-2019-9421.md): In libandroidfw, there is a possible OOB read due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9422](https://cve.now/CVE-2019-9422.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9423](https://cve.now/CVE-2019-9423.md): In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android · opencv-contrib-python +3)
- [CVE-2019-9424](https://cve.now/CVE-2019-9424.md): In the Screen Lock, there is a possible information disclosure due to an unusual root cause. (no CVSS, Android)
- [CVE-2019-9425](https://cve.now/CVE-2019-9425.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9427](https://cve.now/CVE-2019-9427.md): In Bluetooth, there is a possible information disclosure due to a use after free. (no CVSS, Android)
- [CVE-2019-9428](https://cve.now/CVE-2019-9428.md): In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. (no CVSS, Android)
- [CVE-2019-9429](https://cve.now/CVE-2019-9429.md): In profman, there is a possible out of bounds write due to memory corruption. (no CVSS, Android)
- [CVE-2019-9430](https://cve.now/CVE-2019-9430.md): In Bluetooth, there is a possible null pointer dereference due to a missing null check. (no CVSS, Android)
- [CVE-2019-9431](https://cve.now/CVE-2019-9431.md): In Bluetooth, there is a possible out of bounds read due to a use after free. (no CVSS, Android)
- [CVE-2019-9432](https://cve.now/CVE-2019-9432.md): In Bluetooth, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2019-9433](https://cve.now/CVE-2019-9433.md): In libvpx, there is a possible information disclosure due to improper input validation. (no CVSS, Android)
- [CVE-2019-9434](https://cve.now/CVE-2019-9434.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9435](https://cve.now/CVE-2019-9435.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9371](https://cve.now/CVE-2019-9371.md): In libvpx, there is a possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2019-9372](https://cve.now/CVE-2019-9372.md): In libskia, there is a possible crash due to a missing null check. (no CVSS, Android)
- [CVE-2019-9373](https://cve.now/CVE-2019-9373.md): In JobStore, there is a mismatched serialization/deserialization for the "battery-not-low" job attribute. (no CVSS, Android)
- [CVE-2019-9375](https://cve.now/CVE-2019-9375.md): In hostapd, there is a possible out of bounds write due to a race condition. (no CVSS, Android)
- [CVE-2019-9376](https://cve.now/CVE-2019-9376.md): In Account of Account.java, there is a possible boot loop due to improper input validation. (no CVSS, Android)
- [CVE-2019-9377](https://cve.now/CVE-2019-9377.md): In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missi (no CVSS, Android)
- [CVE-2019-9378](https://cve.now/CVE-2019-9378.md): In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. (no CVSS, Android)
- [CVE-2019-9379](https://cve.now/CVE-2019-9379.md): In libstagefright, there is a possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9380](https://cve.now/CVE-2019-9380.md): In the settings UI, there is a possible spoofing vulnerability due to a missing permission check. (no CVSS, Android)
- [CVE-2019-9381](https://cve.now/CVE-2019-9381.md): In netd, there is a possible out of bounds read due to a use after free. (no CVSS, Android)
- [CVE-2019-9382](https://cve.now/CVE-2019-9382.md): In libeffects, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9383](https://cve.now/CVE-2019-9383.md): In NFC server, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9384](https://cve.now/CVE-2019-9384.md): In LockPatternUtils, there is a possible escalation of privilege due to an improper permissions check. (no CVSS, Android)
- [CVE-2019-9385](https://cve.now/CVE-2019-9385.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9386](https://cve.now/CVE-2019-9386.md): In NFC server, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9387](https://cve.now/CVE-2019-9387.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9388](https://cve.now/CVE-2019-9388.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9389](https://cve.now/CVE-2019-9389.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9390](https://cve.now/CVE-2019-9390.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9391](https://cve.now/CVE-2019-9391.md): In libxaac, there is a possible out of bounds read due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9393](https://cve.now/CVE-2019-9393.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9394](https://cve.now/CVE-2019-9394.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9395](https://cve.now/CVE-2019-9395.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9396](https://cve.now/CVE-2019-9396.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9397](https://cve.now/CVE-2019-9397.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9398](https://cve.now/CVE-2019-9398.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9399](https://cve.now/CVE-2019-9399.md): The Print Service is susceptible to man in the middle attacks due to improperly used crypto. (no CVSS, Android)
- [CVE-2019-9400](https://cve.now/CVE-2019-9400.md): In Bluetooth, there is a possible null pointer dereference due to a missing null check. (no CVSS, Android)
- [CVE-2019-9401](https://cve.now/CVE-2019-9401.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9402](https://cve.now/CVE-2019-9402.md): In Bluetooth, there is possible controlled termination due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9403](https://cve.now/CVE-2019-9403.md): In cn-cbor, there is a possible out of bounds read due to improper casting. (no CVSS, Android)
- [CVE-2019-9338](https://cve.now/CVE-2019-9338.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9341](https://cve.now/CVE-2019-9341.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9342](https://cve.now/CVE-2019-9342.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9343](https://cve.now/CVE-2019-9343.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9344](https://cve.now/CVE-2019-9344.md): In NFC server, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9346](https://cve.now/CVE-2019-9346.md): In libstagefright, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2019-9347](https://cve.now/CVE-2019-9347.md): In the m4v\_h263 codec, there is a possible out of bounds read due to a use after free. (no CVSS, Android)
- [CVE-2019-9348](https://cve.now/CVE-2019-9348.md): In libstagefright, there is a possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2019-9349](https://cve.now/CVE-2019-9349.md): In libstagefright, there is a possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2019-9350](https://cve.now/CVE-2019-9350.md): In Keymaster, there is a possible EoP due to a use after free. (no CVSS, Android)
- [CVE-2019-9351](https://cve.now/CVE-2019-9351.md): In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missi (no CVSS, Android)
- [CVE-2019-9352](https://cve.now/CVE-2019-9352.md): In libstagefright, there is a possible resource exhaustion due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9353](https://cve.now/CVE-2019-9353.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9354](https://cve.now/CVE-2019-9354.md): In NFC server, there's a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9355](https://cve.now/CVE-2019-9355.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9356](https://cve.now/CVE-2019-9356.md): In NFC server, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9357](https://cve.now/CVE-2019-9357.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9358](https://cve.now/CVE-2019-9358.md): In NFC, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9359](https://cve.now/CVE-2019-9359.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9360](https://cve.now/CVE-2019-9360.md): In the TEE, there's a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9361](https://cve.now/CVE-2019-9361.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9362](https://cve.now/CVE-2019-9362.md): In libSACdec, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9363](https://cve.now/CVE-2019-9363.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9364](https://cve.now/CVE-2019-9364.md): In AudioService, there is a possible trigger of background user audio due to a permissions bypass. (no CVSS, Android)
- [CVE-2019-9365](https://cve.now/CVE-2019-9365.md): In Bluetooth, there is a possible deserialization error due to missing string validation. (no CVSS, Android)
- [CVE-2019-9366](https://cve.now/CVE-2019-9366.md): In libSBRdec there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9367](https://cve.now/CVE-2019-9367.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9368](https://cve.now/CVE-2019-9368.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9369](https://cve.now/CVE-2019-9369.md): In Bluetooth, there is a use of uninitialized variable. (no CVSS, Android)
- [CVE-2019-9370](https://cve.now/CVE-2019-9370.md): In sonivox, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2019-9308](https://cve.now/CVE-2019-9308.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9309](https://cve.now/CVE-2019-9309.md): In NFC, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9310](https://cve.now/CVE-2019-9310.md): In libFDK, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9311](https://cve.now/CVE-2019-9311.md): In Bluetooth, there is a possible crash due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9312](https://cve.now/CVE-2019-9312.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9313](https://cve.now/CVE-2019-9313.md): In libstagefright, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9314](https://cve.now/CVE-2019-9314.md): In libavc, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9315](https://cve.now/CVE-2019-9315.md): In libhevc, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9316](https://cve.now/CVE-2019-9316.md): In libstagefright, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9317](https://cve.now/CVE-2019-9317.md): In libstagefright, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9318](https://cve.now/CVE-2019-9318.md): In libhevc, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9319](https://cve.now/CVE-2019-9319.md): In libavc, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9320](https://cve.now/CVE-2019-9320.md): In libavc, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9321](https://cve.now/CVE-2019-9321.md): In libavc, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9322](https://cve.now/CVE-2019-9322.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9323](https://cve.now/CVE-2019-9323.md): In the Wallpaper Manager service, there is a possible information disclosure due to a missing permission check. (no CVSS, Android)
- [CVE-2019-9325](https://cve.now/CVE-2019-9325.md): In libvpx, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9326](https://cve.now/CVE-2019-9326.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9327](https://cve.now/CVE-2019-9327.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9328](https://cve.now/CVE-2019-9328.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9329](https://cve.now/CVE-2019-9329.md): In Bluetooth, there is a possible out of bounds read due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9330](https://cve.now/CVE-2019-9330.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9331](https://cve.now/CVE-2019-9331.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9332](https://cve.now/CVE-2019-9332.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9333](https://cve.now/CVE-2019-9333.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9334](https://cve.now/CVE-2019-9334.md): In libhevc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9335](https://cve.now/CVE-2019-9335.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9336](https://cve.now/CVE-2019-9336.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9337](https://cve.now/CVE-2019-9337.md): In libavc there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9277](https://cve.now/CVE-2019-9277.md): In the proc filesystem, there is a possible information disclosure due to log information disclosure. (no CVSS, Android)
- [CVE-2019-9278](https://cve.now/CVE-2019-9278.md): In libexif, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9279](https://cve.now/CVE-2019-9279.md): In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference. (no CVSS, Android)
- [CVE-2019-9280](https://cve.now/CVE-2019-9280.md): In keyguard, there is a possible escalation of privilege due to improper permission checks. (no CVSS, Android)
- [CVE-2019-9281](https://cve.now/CVE-2019-9281.md): In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. (no CVSS, Android)
- [CVE-2019-9282](https://cve.now/CVE-2019-9282.md): In skia, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9283](https://cve.now/CVE-2019-9283.md): In AAC Codec, there is a possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2019-9284](https://cve.now/CVE-2019-9284.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9285](https://cve.now/CVE-2019-9285.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9286](https://cve.now/CVE-2019-9286.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9287](https://cve.now/CVE-2019-9287.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9288](https://cve.now/CVE-2019-9288.md): In libhidcommand\_jni, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9289](https://cve.now/CVE-2019-9289.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9290](https://cve.now/CVE-2019-9290.md): In tzdata there is possible memory corruption due to a mismatch between allocation and deallocation functions. (no CVSS, Android)
- [CVE-2019-9291](https://cve.now/CVE-2019-9291.md): In Bluetooth, there is a possible remote code execution due to an improper memory allocation. (no CVSS, Android)
- [CVE-2019-9292](https://cve.now/CVE-2019-9292.md): In the Activity Manager service, there is a possible information disclosure due to a confused deputy. (no CVSS, Android)
- [CVE-2019-9293](https://cve.now/CVE-2019-9293.md): In libstagefright, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9294](https://cve.now/CVE-2019-9294.md): In libstagefright, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9295](https://cve.now/CVE-2019-9295.md): In com.android.apps.tag, there is a possible bypass of user interaction requirements due to a missing permission check. (no CVSS, Android)
- [CVE-2019-9296](https://cve.now/CVE-2019-9296.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9297](https://cve.now/CVE-2019-9297.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9298](https://cve.now/CVE-2019-9298.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9299](https://cve.now/CVE-2019-9299.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9300](https://cve.now/CVE-2019-9300.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9301](https://cve.now/CVE-2019-9301.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9302](https://cve.now/CVE-2019-9302.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9303](https://cve.now/CVE-2019-9303.md): In libFDK, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9304](https://cve.now/CVE-2019-9304.md): In libMpegTPDec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9305](https://cve.now/CVE-2019-9305.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9306](https://cve.now/CVE-2019-9306.md): In libMpegTPDec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9307](https://cve.now/CVE-2019-9307.md): In libAACdec, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9237](https://cve.now/CVE-2019-9237.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9238](https://cve.now/CVE-2019-9238.md): In the NFC stack, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9239](https://cve.now/CVE-2019-9239.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9240](https://cve.now/CVE-2019-9240.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9241](https://cve.now/CVE-2019-9241.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9242](https://cve.now/CVE-2019-9242.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9243](https://cve.now/CVE-2019-9243.md): In wpa\_supplicant\_8, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9244](https://cve.now/CVE-2019-9244.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9246](https://cve.now/CVE-2019-9246.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9247](https://cve.now/CVE-2019-9247.md): In AAC Codec, there is a missing variable initialization. (no CVSS, Android)
- [CVE-2019-9249](https://cve.now/CVE-2019-9249.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9250](https://cve.now/CVE-2019-9250.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9251](https://cve.now/CVE-2019-9251.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9252](https://cve.now/CVE-2019-9252.md): In libavc there is a possible out of bounds read due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9253](https://cve.now/CVE-2019-9253.md): In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. (no CVSS, Android)
- [CVE-2019-9256](https://cve.now/CVE-2019-9256.md): In libmediaextractor there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9257](https://cve.now/CVE-2019-9257.md): In Bluetooth, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9258](https://cve.now/CVE-2019-9258.md): In wifilogd, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9259](https://cve.now/CVE-2019-9259.md): In the Bluetooth stack, there is a possible out of bounds write due to a use after free. (no CVSS, Android)
- [CVE-2019-9260](https://cve.now/CVE-2019-9260.md): In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2019-9261](https://cve.now/CVE-2019-9261.md): In libxaac there is a possible out of bounds read due to missing bounds check. (no CVSS, Android)
- [CVE-2019-9262](https://cve.now/CVE-2019-9262.md): In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-9263](https://cve.now/CVE-2019-9263.md): In telephony, there is a possible bypass of user interaction requirements due to missing permission checks. (no CVSS, Android)
- [CVE-2019-9264](https://cve.now/CVE-2019-9264.md): In libxaac there is a possible out of bounds read due to missing bounds check. (no CVSS, Android)
- [CVE-2019-9265](https://cve.now/CVE-2019-9265.md): In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2019-9266](https://cve.now/CVE-2019-9266.md): In sensorservice, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9268](https://cve.now/CVE-2019-9268.md): In libstagefright, there is a possible use-after-free due to improper locking. (no CVSS, Android)
- [CVE-2019-9269](https://cve.now/CVE-2019-9269.md): In System Settings, there is a possible permissions bypass due to a cached Linux user ID. (no CVSS, Android)
- [CVE-2019-9272](https://cve.now/CVE-2019-9272.md): In WiFi, there is a possible leak of WiFi state due to a permissions bypass. (no CVSS, Android)
- [CVE-2019-2150](https://cve.now/CVE-2019-2150.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2151](https://cve.now/CVE-2019-2151.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2152](https://cve.now/CVE-2019-2152.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2153](https://cve.now/CVE-2019-2153.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2154](https://cve.now/CVE-2019-2154.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2155](https://cve.now/CVE-2019-2155.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2156](https://cve.now/CVE-2019-2156.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2157](https://cve.now/CVE-2019-2157.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2158](https://cve.now/CVE-2019-2158.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2159](https://cve.now/CVE-2019-2159.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2160](https://cve.now/CVE-2019-2160.md): In libxaac there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2161](https://cve.now/CVE-2019-2161.md): In libxaac there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2162](https://cve.now/CVE-2019-2162.md): In libxaac there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2163](https://cve.now/CVE-2019-2163.md): In libxaac there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2164](https://cve.now/CVE-2019-2164.md): In libxaac there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2165](https://cve.now/CVE-2019-2165.md): In libxaac there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2166](https://cve.now/CVE-2019-2166.md): In libxaac there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-2167](https://cve.now/CVE-2019-2167.md): In libxaac there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-2168](https://cve.now/CVE-2019-2168.md): In libxaac there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-2169](https://cve.now/CVE-2019-2169.md): In libxaac there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-2170](https://cve.now/CVE-2019-2170.md): In libxaac there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-2171](https://cve.now/CVE-2019-2171.md): In libxaac there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-2172](https://cve.now/CVE-2019-2172.md): In libxaac there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-9232](https://cve.now/CVE-2019-9232.md): In libvpx, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9233](https://cve.now/CVE-2019-9233.md): In wpa\_supplicant\_8, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2019-9234](https://cve.now/CVE-2019-9234.md): In wpa\_supplicant\_8, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9235](https://cve.now/CVE-2019-9235.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9236](https://cve.now/CVE-2019-9236.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2072](https://cve.now/CVE-2019-2072.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2073](https://cve.now/CVE-2019-2073.md): In libxaac there is a possible out of bounds write to missing bounds check. (no CVSS, Android)
- [CVE-2019-2074](https://cve.now/CVE-2019-2074.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2075](https://cve.now/CVE-2019-2075.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2076](https://cve.now/CVE-2019-2076.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2077](https://cve.now/CVE-2019-2077.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2078](https://cve.now/CVE-2019-2078.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2079](https://cve.now/CVE-2019-2079.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2080](https://cve.now/CVE-2019-2080.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2081](https://cve.now/CVE-2019-2081.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2082](https://cve.now/CVE-2019-2082.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2083](https://cve.now/CVE-2019-2083.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2084](https://cve.now/CVE-2019-2084.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2085](https://cve.now/CVE-2019-2085.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2086](https://cve.now/CVE-2019-2086.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2087](https://cve.now/CVE-2019-2087.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2138](https://cve.now/CVE-2019-2138.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2139](https://cve.now/CVE-2019-2139.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2140](https://cve.now/CVE-2019-2140.md): In libxaac, there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2019-2141](https://cve.now/CVE-2019-2141.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2142](https://cve.now/CVE-2019-2142.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2143](https://cve.now/CVE-2019-2143.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2144](https://cve.now/CVE-2019-2144.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2145](https://cve.now/CVE-2019-2145.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2146](https://cve.now/CVE-2019-2146.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2147](https://cve.now/CVE-2019-2147.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2148](https://cve.now/CVE-2019-2148.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2149](https://cve.now/CVE-2019-2149.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2055](https://cve.now/CVE-2019-2055.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2059](https://cve.now/CVE-2019-2059.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2060](https://cve.now/CVE-2019-2060.md): In libxaac, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2061](https://cve.now/CVE-2019-2061.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2062](https://cve.now/CVE-2019-2062.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2063](https://cve.now/CVE-2019-2063.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2064](https://cve.now/CVE-2019-2064.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2065](https://cve.now/CVE-2019-2065.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2066](https://cve.now/CVE-2019-2066.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2067](https://cve.now/CVE-2019-2067.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2068](https://cve.now/CVE-2019-2068.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2069](https://cve.now/CVE-2019-2069.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2070](https://cve.now/CVE-2019-2070.md): In libxaac, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2071](https://cve.now/CVE-2019-2071.md): In libxaac there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-11754](https://cve.now/CVE-2019-11754.md): When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. (no CVSS, Mozilla Firefox)
- [CVE-2019-11733](https://cve.now/CVE-2019-11733.md): When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. (no CVSS, Mozilla Firefox)
- [CVE-2019-11734](https://cve.now/CVE-2019-11734.md): Mozilla developers and community members reported memory safety bugs present in Firefox 68. (no CVSS, Mozilla Firefox)
- [CVE-2019-11735](https://cve.now/CVE-2019-11735.md): Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. (no CVSS, Mozilla Firefox)
- [CVE-2019-11736](https://cve.now/CVE-2019-11736.md): The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the rep (no CVSS, Mozilla Firefox)
- [CVE-2019-11737](https://cve.now/CVE-2019-11737.md): If a wildcard ('\*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive wil (no CVSS, Mozilla Firefox)
- [CVE-2019-11738](https://cve.now/CVE-2019-11738.md): If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any (no CVSS, Mozilla Firefox)
- [CVE-2019-11739](https://cve.now/CVE-2019-11739.md): Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. (no CVSS, Mozilla Thunderbird)
- [CVE-2019-11740](https://cve.now/CVE-2019-11740.md): Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2019-11741](https://cve.now/CVE-2019-11741.md): A compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS) attack on content from any site it can cause to (no CVSS, Mozilla Firefox)
- [CVE-2019-11742](https://cve.now/CVE-2019-11742.md): A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canvas> el (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2019-11743](https://cve.now/CVE-2019-11743.md): Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload even (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2019-11744](https://cve.now/CVE-2019-11744.md): Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them as markup. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2019-11746](https://cve.now/CVE-2019-11746.md): A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2019-11747](https://cve.now/CVE-2019-11747.md): The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site. (no CVSS, Mozilla Firefox)
- [CVE-2019-11748](https://cve.now/CVE-2019-11748.md): WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party c (no CVSS, Mozilla Firefox)
- [CVE-2019-11749](https://cve.now/CVE-2019-11749.md): A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal (no CVSS, Mozilla Firefox)
- [CVE-2019-11750](https://cve.now/CVE-2019-11750.md): A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. (no CVSS, Mozilla Firefox)
- [CVE-2019-11751](https://cve.now/CVE-2019-11751.md): Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks o (no CVSS, Mozilla Firefox)
- [CVE-2019-11752](https://cve.now/CVE-2019-11752.md): It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2019-11753](https://cve.now/CVE-2019-11753.md): The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivi (no CVSS, Mozilla Firefox)
- [CVE-2019-11755](https://cve.now/CVE-2019-11755.md): A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature (no CVSS, Mozilla Thunderbird)
- [CVE-2019-16924](https://cve.now/CVE-2019-16924.md): The Nulock application 1.5.0 for mobile devices sends a cleartext password over Bluetooth, which allows remote attackers (after sniffing the (no CVSS)
- [CVE-2019-16923](https://cve.now/CVE-2019-16923.md): kkcms 1.3 has jx.php?url= XSS. (no CVSS)
- [CVE-2019-8075](https://cve.now/CVE-2019-8075.md): Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. (no CVSS, Adobe Flash Player)
- [CVE-2019-8074](https://cve.now/CVE-2019-8074.md): ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability. (no CVSS, Adobe Cold Fusion)
- [CVE-2019-8073](https://cve.now/CVE-2019-8073.md): ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Command Injection via Vulnerable component vulnerabi (no CVSS, Adobe Cold Fusion)
- [CVE-2019-8072](https://cve.now/CVE-2019-8072.md): ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. (no CVSS, Adobe Cold Fusion)
- [CVE-2019-16922](https://cve.now/CVE-2019-16922.md): SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files. (no CVSS)
- [CVE-2019-9853](https://cve.now/CVE-2019-9853.md): Insufficient URL decoding flaw in categorizing macro location (no CVSS, Document Foundation LibreOffice)
- [CVE-2018-19592](https://cve.now/CVE-2018-19592.md): The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. (no CVSS)
- [CVE-2019-4141](https://cve.now/CVE-2019-4141.md): IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a (CVSS 5.3, IBM MQ)
- [CVE-2019-13376](https://cve.now/CVE-2019-13376.md): phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. (no CVSS, phpbb/phpbb)
- [CVE-2019-16921](https://cve.now/CVE-2019-16921.md): In the Linux kernel before 4.17, hns\_roce\_alloc\_ucontext in drivers/infiniband/hw/hns/hns\_roce\_main.c does not initialize the resp data stru (no CVSS)
- [CVE-2019-16920](https://cve.now/CVE-2019-16920.md): Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. (CVSS 9.8, KEV)
- [CVE-2019-16902](https://cve.now/CVE-2019-16902.md): In the ARforms plugin 3.7.1 for WordPress, arf\_delete\_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by s (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-09-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.