# CVEs published 2019-11-14

262 CVEs were published on November 14, 2019: 1 critical, 1 high. Days are UTC.

- [CVE-2019-11931](https://cve.now/CVE-2019-11931.md): A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. (no CVSS, Facebook WhatsApp for Android · Facebook WhatsApp for iOS +4)
- [CVE-2019-18980](https://cve.now/CVE-2019-18980.md): On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's o (no CVSS)
- [CVE-2019-14678](https://cve.now/CVE-2019-14678.md): SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. (no CVSS)
- [CVE-2019-18651](https://cve.now/CVE-2019-18651.md): A cross-site request forgery (CSRF) vulnerability in 3xLogic Infinias Access Control through 6.6.9586.0 allows remote attackers to execute m (no CVSS)
- [CVE-2019-17391](https://cve.now/CVE-2019-17391.md): An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. (no CVSS)
- [CVE-2019-18978](https://cve.now/CVE-2019-18978.md): An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. (no CVSS, rack-cors)
- [CVE-2019-15799](https://cve.now/CVE-2019-15799.md): An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. (no CVSS)
- [CVE-2019-15800](https://cve.now/CVE-2019-15800.md): An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. (no CVSS)
- [CVE-2019-15801](https://cve.now/CVE-2019-15801.md): An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. (no CVSS)
- [CVE-2019-15802](https://cve.now/CVE-2019-15802.md): An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. (no CVSS)
- [CVE-2019-15803](https://cve.now/CVE-2019-15803.md): An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. (no CVSS)
- [CVE-2019-15804](https://cve.now/CVE-2019-15804.md): An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. (no CVSS)
- [CVE-2013-4106](https://cve.now/CVE-2013-4106.md): A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22. (no CVSS, Cryptocat)
- [CVE-2013-4108](https://cve.now/CVE-2013-4108.md): Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. (no CVSS, Cryptocat)
- [CVE-2019-0184](https://cve.now/CVE-2019-0184.md): Insufficient access control in protected memory subsystem for Intel(R) TXT for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor (no CVSS, 2019.2 IPU – Intel(R) TXT)
- [CVE-2018-12207](https://cve.now/CVE-2018-12207.md): Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated (no CVSS, 2019.2 IPU – Intel(R) Processor Machine Check Error)
- [CVE-2019-0117](https://cve.now/CVE-2019-0117.md): Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Fam (no CVSS, 2019.2 IPU – Intel(R) SGX with Intel(R) Processor Graphics…)
- [CVE-2019-0124](https://cve.now/CVE-2019-0124.md): Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potent (no CVSS, 2019.2 IPU – Intel(R) SGX and TXT)
- [CVE-2019-0123](https://cve.now/CVE-2019-0123.md): Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potent (no CVSS, 2019.2 IPU – Intel(R) SGX and TXT)
- [CVE-2019-0151](https://cve.now/CVE-2019-0151.md): Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged u (no CVSS, 2019.2 IPU – Intel(R) Processor Security)
- [CVE-2019-0152](https://cve.now/CVE-2019-0152.md): Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileg (no CVSS, 2019.2 IPU – Intel(R) Processor Security)
- [CVE-2019-11113](https://cve.now/CVE-2019-11113.md): Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may a (no CVSS, 2019.2 IPU – Intel(R) Graphics Driver for Windows\* and Linux)
- [CVE-2019-11089](https://cve.now/CVE-2019-11089.md): Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated us (no CVSS, 2019.2 IPU – Intel(R) Graphics Driver for Windows\* and Linux)
- [CVE-2019-14591](https://cve.now/CVE-2019-14591.md): Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentia (no CVSS, 2019.2 IPU – Intel(R) Graphics Driver for Windows\* and Linux)
- [CVE-2019-14590](https://cve.now/CVE-2019-14590.md): Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potent (no CVSS, 2019.2 IPU – Intel(R) Graphics Driver for Windows\* and Linux)
- [CVE-2019-14574](https://cve.now/CVE-2019-14574.md): Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially (no CVSS, 2019.2 IPU – Intel(R) Graphics Driver for Windows\* and Linux)
- [CVE-2019-11111](https://cve.now/CVE-2019-11111.md): Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenti (no CVSS, 2019.2 IPU – Intel(R) Graphics Driver for Windows\* and Linux)
- [CVE-2013-4109](https://cve.now/CVE-2013-4109.md): An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165. (no CVSS, Cryptocat Message Handling)
- [CVE-2019-18939](https://cve.now/CVE-2019-18939.md): eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated a (no CVSS)
- [CVE-2019-18938](https://cve.now/CVE-2019-18938.md): eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated (no CVSS)
- [CVE-2019-18937](https://cve.now/CVE-2019-18937.md): eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticat (no CVSS)
- [CVE-2019-0155](https://cve.now/CVE-2019-0155.md): Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor (no CVSS, 2019.2 IPU – Intel(R) Graphics Driver for Windows\* and Linux)
- [CVE-2013-3070](https://cve.now/CVE-2013-3070.md): An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which disclose (no CVSS)
- [CVE-2019-11112](https://cve.now/CVE-2019-11112.md): Memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver before 26.20.100.6813 (DCH) or 26.20.100.6812 may allow an authenticated (no CVSS, 2019.2 IPU – Intel(R) Graphics Driver for Windows\* and Linux)
- [CVE-2019-0185](https://cve.now/CVE-2019-0185.md): Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families; (no CVSS, 2019.2 IPU – Intel(R) Processor Graphics SMM)
- [CVE-2019-0150](https://cve.now/CVE-2019-0150.md): Insufficient access control in firmware Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow a privileged user to potentia (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0149](https://cve.now/CVE-2019-0149.md): Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0148](https://cve.now/CVE-2019-0148.md): Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0147](https://cve.now/CVE-2019-0147.md): Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated use (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0146](https://cve.now/CVE-2019-0146.md): Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentia (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0144](https://cve.now/CVE-2019-0144.md): Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potential (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0143](https://cve.now/CVE-2019-0143.md): Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0139](https://cve.now/CVE-2019-0139.md): Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to poten (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0142](https://cve.now/CVE-2019-0142.md): Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileg (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0145](https://cve.now/CVE-2019-0145.md): Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potential (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0140](https://cve.now/CVE-2019-0140.md): Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially (no CVSS, 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers)
- [CVE-2019-0154](https://cve.now/CVE-2019-0154.md): Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Fa (no CVSS, 2019.2 IPU – Intel(R) Processor Graphics Update)
- [CVE-2019-11135](https://cve.now/CVE-2019-11135.md): TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable informat (CVSS 6.5, 2019.2 IPU – TSX Asynchronous Abort)
- [CVE-2019-11139](https://cve.now/CVE-2019-11139.md): Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to p (no CVSS, 2019.2 IPU – Intel(R) Xeon(R) Scalable Processors Voltage S…)
- [CVE-2013-3072](https://cve.now/CVE-2013-3072.md): An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://\<router\_ip\>/apply.cgi?/hdd\_usr\_setup.h (no CVSS)
- [CVE-2013-3073](https://cve.now/CVE-2013-3073.md): A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34. (no CVSS)
- [CVE-2019-11137](https://cve.now/CVE-2019-11137.md): Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xe (no CVSS, 2019.2 IPU – UEFI)
- [CVE-2019-16110](https://cve.now/CVE-2019-16110.md): The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code b (no CVSS)
- [CVE-2019-11136](https://cve.now/CVE-2019-11136.md): Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors (no CVSS, 2019.2 IPU – UEFI)
- [CVE-2019-11153](https://cve.now/CVE-2019-11153.md): Memory corruption issues in Intel(R) PROSet/Wireless WiFi Software extension DLL before version 21.40 may allow an authenticated user to pot (no CVSS, Intel(R) WIFI Drivers and Intel(R) PROSet/Wireless WiFi Sof…)
- [CVE-2019-11152](https://cve.now/CVE-2019-11152.md): Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privi (no CVSS, Intel(R) WIFI Drivers and Intel(R) PROSet/Wireless WiFi Sof…)
- [CVE-2019-11151](https://cve.now/CVE-2019-11151.md): Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privi (no CVSS, Intel(R) WIFI Drivers and Intel(R) PROSet/Wireless WiFi Sof…)
- [CVE-2019-11156](https://cve.now/CVE-2019-11156.md): Logic errors in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation (no CVSS, Intel(R) PROSet/Wireless WiFi Software Security)
- [CVE-2019-11155](https://cve.now/CVE-2019-11155.md): Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially (no CVSS, Intel(R) PROSet/Wireless WiFi Software Security)
- [CVE-2019-11154](https://cve.now/CVE-2019-11154.md): Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially (no CVSS, Intel(R) PROSet/Wireless WiFi Software Security)
- [CVE-2019-14565](https://cve.now/CVE-2019-14565.md): Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, ma (no CVSS, 2019.2 IPU – Intel(R) SGX)
- [CVE-2019-14566](https://cve.now/CVE-2019-14566.md): Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information (no CVSS, 2019.2 IPU – Intel(R) SGX)
- [CVE-2019-14602](https://cve.now/CVE-2019-14602.md): Improper permissions in the installer for the Nuvoton\* CIR Driver versions 1.02.1002 and before may allow an authenticated user to potential (no CVSS, Nuvoton\* CIR Driver for Windows\* 8 for Intel(R) NUC)
- [CVE-2019-11182](https://cve.now/CVE-2019-11182.md): Memory corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of ser (no CVSS, Intel(R) BMC)
- [CVE-2019-11181](https://cve.now/CVE-2019-11181.md): Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation of (no CVSS, Intel(R) BMC)
- [CVE-2019-11180](https://cve.now/CVE-2019-11180.md): Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable d (no CVSS, Intel(R) BMC)
- [CVE-2019-11179](https://cve.now/CVE-2019-11179.md): Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable inf (no CVSS, Intel(R) BMC)
- [CVE-2019-11178](https://cve.now/CVE-2019-11178.md): Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclo (no CVSS, Intel(R) BMC)
- [CVE-2019-11177](https://cve.now/CVE-2019-11177.md): Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of s (no CVSS, Intel(R) BMC)
- [CVE-2019-11175](https://cve.now/CVE-2019-11175.md): Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable d (no CVSS, Intel(R) BMC)
- [CVE-2019-11174](https://cve.now/CVE-2019-11174.md): Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable inf (no CVSS, Intel(R) BMC)
- [CVE-2019-11173](https://cve.now/CVE-2019-11173.md): Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable (no CVSS, Intel(R) BMC)
- [CVE-2019-11172](https://cve.now/CVE-2019-11172.md): Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information d (no CVSS, Intel(R) BMC)
- [CVE-2019-11171](https://cve.now/CVE-2019-11171.md): Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information dis (no CVSS, Intel(R) BMC)
- [CVE-2019-11170](https://cve.now/CVE-2019-11170.md): Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable informati (no CVSS, Intel(R) BMC)
- [CVE-2019-11168](https://cve.now/CVE-2019-11168.md): Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable (no CVSS, Intel(R) BMC)
- [CVE-2012-1161](https://cve.now/CVE-2012-1161.md): Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results (no CVSS, Moodle)
- [CVE-2012-1170](https://cve.now/CVE-2012-1170.md): Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough (no CVSS, Moodle)
- [CVE-2019-15743](https://cve.now/CVE-2019-15743.md): The Sony Xperia Touch Android device with a build fingerprint of Sony/blanc\_windy/blanc\_windy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user (no CVSS)
- [CVE-2019-15475](https://cve.now/CVE-2019-15475.md): The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onc\_eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contain (no CVSS)
- [CVE-2019-15474](https://cve.now/CVE-2019-15474.md): The Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys c (no CVSS)
- [CVE-2019-15473](https://cve.now/CVE-2019-15473.md): The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine\_sprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/rele (no CVSS)
- [CVE-2019-15472](https://cve.now/CVE-2019-15472.md): The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy\_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release- (no CVSS)
- [CVE-2019-15471](https://cve.now/CVE-2019-15471.md): The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release- (no CVSS)
- [CVE-2019-15470](https://cve.now/CVE-2019-15470.md): The Xiaomi Redmi Note 6 Pro Android device with a build fingerprint of xiaomi/tulip/tulip:8.1.0/OPM1.171019.011/V10.2.2.0.OEKMIXM:user/relea (no CVSS)
- [CVE-2019-15469](https://cve.now/CVE-2019-15469.md): The Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-key (no CVSS)
- [CVE-2019-15468](https://cve.now/CVE-2019-15468.md): The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy\_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release- (no CVSS)
- [CVE-2019-15467](https://cve.now/CVE-2019-15467.md): The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release- (no CVSS)
- [CVE-2019-15466](https://cve.now/CVE-2019-15466.md): The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura\_india/sakura\_india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:u (no CVSS)
- [CVE-2019-15465](https://cve.now/CVE-2019-15465.md): The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteubm/j7y17lte:8.1.0/M1AJQ/J730GMUBS6BSC1:user/release-keys cont (no CVSS)
- [CVE-2019-15464](https://cve.now/CVE-2019-15464.md): The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteub/j7y17lte:8.1.0/M1AJQ/J730GUBS6BSC1:user/release-keys contai (no CVSS)
- [CVE-2019-15463](https://cve.now/CVE-2019-15463.md): The Samsung j7popeltemtr Android device with a build fingerprint of samsung/j7popeltemtr/j7popeltemtr:8.1.0/M1AJQ/J727T1UVS5BSC2:user/releas (no CVSS)
- [CVE-2019-15462](https://cve.now/CVE-2019-15462.md): The Samsung J7 Duo Android device with a build fingerprint of samsung/j7duolteub/j7duolte:8.0.0/R16NW/J720MUBS3ASB2:user/release-keys contai (no CVSS)
- [CVE-2019-15461](https://cve.now/CVE-2019-15461.md): The Samsung J7 Neo Android device with a build fingerprint of samsung/j7velteub/j7velte:8.1.0/M1AJQ/J701MUBS6BSB4:user/release-keys contains (no CVSS)
- [CVE-2019-15460](https://cve.now/CVE-2019-15460.md): The Samsung J7 Neo Android device with a build fingerprint of samsung/j7veltedx/j7velte:8.1.0/M1AJQ/J701FXVS6BSC1:user/release-keys contains (no CVSS)
- [CVE-2019-15459](https://cve.now/CVE-2019-15459.md): The Samsung J7 Neo Android device with a build fingerprint of samsung/j7velteub/j7velte:8.1.0/M1AJQ/J701MUBS6BSB3:user/release-keys contains (no CVSS)
- [CVE-2019-15458](https://cve.now/CVE-2019-15458.md): The Samsung J7 Neo Android device with a build fingerprint of samsung/j7veltedx/j7velte:8.1.0/M1AJQ/J701FXXS6BSC1:user/release-keys contains (no CVSS)
- [CVE-2019-15457](https://cve.now/CVE-2019-15457.md): The Samsung J6 Android device with a build fingerprint of samsung/j6ltexx/j6lte:8.0.0/R16NW/J600FNXXU3ASC1:user/release-keys contains a pre- (no CVSS)
- [CVE-2019-15456](https://cve.now/CVE-2019-15456.md): The Samsung J6 Android device with a build fingerprint of samsung/j6ltexx/j6lte:8.0.0/R16NW/J600FNXXU3ASC1:user/release-keys contains a pre- (no CVSS)
- [CVE-2019-15455](https://cve.now/CVE-2019-15455.md): The Samsung J5 Android device with a build fingerprint of samsung/j5y17ltexx/j5y17lte:8.1.0/M1AJQ/J530FXXU3BRL1:user/release-keys contains a (no CVSS)
- [CVE-2019-15454](https://cve.now/CVE-2019-15454.md): The Samsung J4 Android device with a build fingerprint of samsung/j4lteub/j4lte:8.0.0/R16NW/J400MUBU2ARL4:user/release-keys contains a pre-i (no CVSS)
- [CVE-2019-15453](https://cve.now/CVE-2019-15453.md): The Samsung J4 Android device with a build fingerprint of samsung/j4lteub/j4lte:8.0.0/R16NW/J400MUBS2ASC2:user/release-keys contains a pre-i (no CVSS)
- [CVE-2019-15452](https://cve.now/CVE-2019-15452.md): The Samsung J3 Android device with a build fingerprint of samsung/j3y17ltedx/j3y17lte:8.0.0/R16NW/J330GDXS3BSC1:user/release-keys contains a (no CVSS)
- [CVE-2019-15451](https://cve.now/CVE-2019-15451.md): The Samsung J3 Android device with a build fingerprint of samsung/j3y17ltedx/j3y17lte:8.0.0/R16NW/J330GDXS3BSC1:user/release-keys contains a (no CVSS)
- [CVE-2019-15450](https://cve.now/CVE-2019-15450.md): The Samsung j3popeltecan Android device with a build fingerprint of samsung/j3popeltevl/j3popeltecan:8.1.0/M1AJQ/J327WVLS3BSA2:user/release- (no CVSS)
- [CVE-2019-15449](https://cve.now/CVE-2019-15449.md): The Samsung S7 Edge Android device with a build fingerprint of samsung/hero2ltexx/hero2lte:8.0.0/R16NW/G935FXXS4ESC3:user/release-keys conta (no CVSS)
- [CVE-2019-15448](https://cve.now/CVE-2019-15448.md): The Samsung S7 Edge Android device with a build fingerprint of samsung/hero2ltexx/hero2lte:8.0.0/R16NW/G935FXXS4ESC3:user/release-keys conta (no CVSS)
- [CVE-2019-15447](https://cve.now/CVE-2019-15447.md): The Samsung S7 Edge Android device with a build fingerprint of samsung/hero2ltexx/hero2lte:8.0.0/R16NW/G935FXXS4ESC3:user/release-keys conta (no CVSS)
- [CVE-2019-15446](https://cve.now/CVE-2019-15446.md): The Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXU3ESAC:user/release-keys contains a p (no CVSS)
- [CVE-2019-15445](https://cve.now/CVE-2019-15445.md): The Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXS4ESC3:user/release-keys contains a p (no CVSS)
- [CVE-2019-15444](https://cve.now/CVE-2019-15444.md): The Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXS4ESC3:user/release-keys contains a p (no CVSS)
- [CVE-2019-15443](https://cve.now/CVE-2019-15443.md): The Samsung J7 Max Android device with a build fingerprint of samsung/j7maxlteins/j7maxlte:8.1.0/M1AJQ/G615FXXU2BSB1:user/release-keys conta (no CVSS)
- [CVE-2019-15442](https://cve.now/CVE-2019-15442.md): The Samsung on7xelteskt Android device with a build fingerprint of samsung/on7xelteskt/on7xelteskt:8.1.0/M1AJQ/G610SKSU2CSB1:user/release-ke (no CVSS)
- [CVE-2019-15441](https://cve.now/CVE-2019-15441.md): The Samsung on7xeltelgt Android device with a build fingerprint of samsung/on7xeltelgt/on7xeltelgt:8.1.0/M1AJQ/G610LKLU2CSB1:user/release-ke (no CVSS)
- [CVE-2019-15440](https://cve.now/CVE-2019-15440.md): The Samsung J5 Android device with a build fingerprint of samsung/on5xeltedx/on5xelte:8.0.0/R16NW/G570YDXU2CRL1:user/release-keys contains a (no CVSS)
- [CVE-2019-15439](https://cve.now/CVE-2019-15439.md): The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltedo/xcover4lte:8.1.0/M1AJQ/G390YDXU2BSA1:user/release-keys c (no CVSS)
- [CVE-2019-15438](https://cve.now/CVE-2019-15438.md): The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltedo/xcover4lte:8.1.0/M1AJQ/G390YDXU2BSA1:user/release-keys c (no CVSS)
- [CVE-2019-15437](https://cve.now/CVE-2019-15437.md): The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltexx/xcover4lte:8.1.0/M1AJQ/G390FXXU3BSA2:user/release-keys c (no CVSS)
- [CVE-2019-15436](https://cve.now/CVE-2019-15436.md): The Samsung A8+ Android device with a build fingerprint of samsung/jackpot2ltexx/jackpot2lte:8.0.0/R16NW/A730FXXS4BSC2:user/release-keys con (no CVSS)
- [CVE-2019-15435](https://cve.now/CVE-2019-15435.md): The Samsung A7 Android device with a build fingerprint of samsung/a7y17ltexx/a7y17lte:8.0.0/R16NW/A720FXXU7CSC2:user/release-keys contains a (no CVSS)
- [CVE-2019-15434](https://cve.now/CVE-2019-15434.md): The Samsung A5 Android device with a build fingerprint of samsung/a5y17ltexx/a5y17lte:8.0.0/R16NW/A520FXXS8CSC5:user/release-keys contains a (no CVSS)
- [CVE-2019-15433](https://cve.now/CVE-2019-15433.md): The Samsung A3 Android device with a build fingerprint of samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys contains a (no CVSS)
- [CVE-2019-15432](https://cve.now/CVE-2019-15432.md): The Evercoss U6 Android device with a build fingerprint of EVERCOSS/U6/U6:7.0/NRD90M/1504236704:user/release-keys contains a pre-installed a (no CVSS)
- [CVE-2019-15431](https://cve.now/CVE-2019-15431.md): The Evercoss U50A Android device with a build fingerprint of EVERCOSS/U50A./EVERCOSS:7.0/NRD90M/1499911028:eng/test-keys contains a pre-inst (no CVSS)
- [CVE-2019-15430](https://cve.now/CVE-2019-15430.md): The Bluboo D3 Pro Android device with a build fingerprint of BLUBOO/Bluboo\_D2\_Pro/Bluboo\_D2\_Pro:7.0/NRD90M/1510370501:user/release-keys cont (no CVSS)
- [CVE-2019-15429](https://cve.now/CVE-2019-15429.md): The Panasonic ELUGA\_I9 Android device with a build fingerprint of Panasonic/ELUGA\_I9/ELUGA\_I9:7.0/NRD90M/1501740649:user/release-keys contai (no CVSS)
- [CVE-2019-15428](https://cve.now/CVE-2019-15428.md): The Xiaomi Mi Note 2 Android device with a build fingerprint of Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-i (no CVSS)
- [CVE-2019-15427](https://cve.now/CVE-2019-15427.md): The Xiaomi Mi Mix Android device with a build fingerprint of Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-inst (no CVSS)
- [CVE-2019-15426](https://cve.now/CVE-2019-15426.md): The Xiaomi 5S Plus Android device with a build fingerprint of Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-ins (no CVSS)
- [CVE-2019-15425](https://cve.now/CVE-2019-15425.md): The Kata M4s Android device with a build fingerprint of alps/full\_hct6750\_66\_n/hct6750\_66\_n:7.0/NRD90M/1495624556:user/test-keys contains a (no CVSS)
- [CVE-2019-15424](https://cve.now/CVE-2019-15424.md): The Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys contains a pre-ins (no CVSS)
- [CVE-2019-15423](https://cve.now/CVE-2019-15423.md): The Bluboo Bluboo\_S1 Android device with a build fingerprint of BLUBOO/Bluboo\_S1/Bluboo\_S1:7.0/NRD90M/1495809471:user/release-keys contains (no CVSS)
- [CVE-2019-15422](https://cve.now/CVE-2019-15422.md): The Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys contains a pre-installed ap (no CVSS)
- [CVE-2019-15421](https://cve.now/CVE-2019-15421.md): The Blackview BV7000\_Pro Android device with a build fingerprint of Blackview/BV7000\_Pro/BV7000\_Pro:7.0/NRD90M/1493011204:user/release-keys (no CVSS)
- [CVE-2019-15420](https://cve.now/CVE-2019-15420.md): The Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release- (no CVSS)
- [CVE-2019-15419](https://cve.now/CVE-2019-15419.md): The Asus ASUS\_X015\_1 Android device with a build fingerprint of asus/CN\_X015/ASUS\_X015\_1:7.0/NRD90M/CN\_X015-14.00.1709.35-20171215:user/rele (no CVSS)
- [CVE-2019-15418](https://cve.now/CVE-2019-15418.md): The Asus ASUS\_X00K\_1 Android device with a build fingerprint of asus/CN\_X00K/ASUS\_X00K\_1:7.0/NRD90M/CN\_X00K-14.01.1711.27-20180420:user/rele (no CVSS)
- [CVE-2019-15417](https://cve.now/CVE-2019-15417.md): The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys c (no CVSS)
- [CVE-2019-15416](https://cve.now/CVE-2019-15416.md): The Sony keyaki\_kddi Android device with a build fingerprint of Sony/keyaki\_kddi/keyaki\_kddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-k (no CVSS)
- [CVE-2019-15415](https://cve.now/CVE-2019-15415.md): The Xiaomi Redmi 5 Android device with a build fingerprint of xiaomi/vince/vince:7.1.2/N2G47H/V9.5.4.0.NEGMIFA:user/release-keys contains a (no CVSS)
- [CVE-2019-15414](https://cve.now/CVE-2019-15414.md): The Asus ZenFone AR Android device with a build fingerprint of asus/WW\_ASUS\_A002/ASUS\_A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release- (no CVSS)
- [CVE-2019-15413](https://cve.now/CVE-2019-15413.md): The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WW\_Phone/ASUS\_A001:7.0/NRD90M/14.1010.1804.75-20180612:user/release (no CVSS)
- [CVE-2019-15412](https://cve.now/CVE-2019-15412.md): The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW\_Z01M/ASUS\_Z01M\_1:7.1.1/NMF26F/WW\_71.50.395.57\_20180913:user/rel (no CVSS)
- [CVE-2019-15410](https://cve.now/CVE-2019-15410.md): The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X017D\_2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/releas (no CVSS)
- [CVE-2019-15409](https://cve.now/CVE-2019-15409.md): The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X017D\_2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/releas (no CVSS)
- [CVE-2019-15408](https://cve.now/CVE-2019-15408.md): The Asus ZenFone 5 Lite Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X017D\_1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/re (no CVSS)
- [CVE-2012-1169](https://cve.now/CVE-2012-1169.md): Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names (no CVSS, Moodle)
- [CVE-2019-15407](https://cve.now/CVE-2019-15407.md): The Asus ASUS\_X015\_1 Android device with a build fingerprint of asus/CN\_X015/ASUS\_X015\_1:7.0/NRD90M/CN\_X015-14.00.1709.35-20171215:user/rele (no CVSS)
- [CVE-2019-15406](https://cve.now/CVE-2019-15406.md): The Asus ASUS\_X00LD\_3 Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X00LD\_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/rele (no CVSS)
- [CVE-2019-15405](https://cve.now/CVE-2019-15405.md): The Asus ASUS\_X00K\_1 Android device with a build fingerprint of asus/CN\_X00K/ASUS\_X00K\_1:7.0/NRD90M/CN\_X00K-14.01.1711.27-20180420:user/rele (no CVSS)
- [CVE-2019-15404](https://cve.now/CVE-2019-15404.md): The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X00HD\_4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/rel (no CVSS)
- [CVE-2019-15403](https://cve.now/CVE-2019-15403.md): The Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN\_X00G/ASUS\_X00G\_1:7.0/NRD90M/IN\_X00G-14.02.1807.33-20180706:user/r (no CVSS)
- [CVE-2019-15402](https://cve.now/CVE-2019-15402.md): The Asus ASUS\_A002\_2 Android device with a build fingerprint of asus/WW\_ASUS\_A002\_2/ASUS\_A002\_2:7.0/NRD90M/14.1610.1802.18-20180321:user/rel (no CVSS)
- [CVE-2019-15401](https://cve.now/CVE-2019-15401.md): The Asus ASUS\_A002 Android device with a build fingerprint of asus/WW\_ASUS\_A002/ASUS\_A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-k (no CVSS)
- [CVE-2019-15400](https://cve.now/CVE-2019-15400.md): The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WW\_Phone/ASUS\_A001:7.0/NRD90M/14.1010.1804.75-20180612:user/release (no CVSS)
- [CVE-2019-15399](https://cve.now/CVE-2019-15399.md): The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X017D\_2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/releas (no CVSS)
- [CVE-2019-15398](https://cve.now/CVE-2019-15398.md): The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW\_Z01M/ASUS\_Z01M\_1:7.1.1/NMF26F/WW\_user\_11.40.208.77\_20170922:use (no CVSS)
- [CVE-2019-15397](https://cve.now/CVE-2019-15397.md): The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X00HD\_4:7.1.1/NMF26F/14.2016.1803.373-20180308:user/rel (no CVSS)
- [CVE-2019-15396](https://cve.now/CVE-2019-15396.md): The Asus ZenFone 3 Android device with a build fingerprint of asus/WW\_Phone/ASUS\_Z012D:7.0/NRD90M/14.2020.1708.56-20170719:user/release-keys (no CVSS)
- [CVE-2019-15395](https://cve.now/CVE-2019-15395.md): The Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN\_X00G/ASUS\_X00G\_1:7.0/NRD90M/IN\_X00G-14.02.1807.33-20180706:user/r (no CVSS)
- [CVE-2019-15394](https://cve.now/CVE-2019-15394.md): The Asus ZenFone 5 Selfie Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X017D\_1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/ (no CVSS)
- [CVE-2019-15393](https://cve.now/CVE-2019-15393.md): The Asus ZenFone Live Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X00LD\_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/rele (no CVSS)
- [CVE-2019-15392](https://cve.now/CVE-2019-15392.md): The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm660\_64/sdm660\_64:8.1.0/OPM1/14.2016.1802.247-20180419:user/r (no CVSS)
- [CVE-2019-15391](https://cve.now/CVE-2019-15391.md): The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW\_Phone/ASUS\_X00LD\_1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:use (no CVSS)
- [CVE-2019-15390](https://cve.now/CVE-2019-15390.md): The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-install (no CVSS)
- [CVE-2019-15389](https://cve.now/CVE-2019-15389.md): The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed (no CVSS)
- [CVE-2019-15388](https://cve.now/CVE-2019-15388.md): The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains (no CVSS)
- [CVE-2019-15387](https://cve.now/CVE-2019-15387.md): The Archos Core 101 Android device with a build fingerprint of archos/MTKAC101CR3G\_ARCHOS/ac101cr3g:7.0/NRD90M/20180611.034442:user/release- (no CVSS)
- [CVE-2019-15386](https://cve.now/CVE-2019-15386.md): The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed a (no CVSS)
- [CVE-2019-15385](https://cve.now/CVE-2019-15385.md): The Infinix Note 5 Android device with a build fingerprint of Infinix/H633B/Infinix-X604\_sprout:8.1.0/O11019/L-IN-180206V64:user/release-key (no CVSS)
- [CVE-2019-15384](https://cve.now/CVE-2019-15384.md): The Elephone A4 Android device with a build fingerprint of Elephone/A4/A4:8.1.0/O11019/20180530.143559:user/release-keys contains a pre-inst (no CVSS)
- [CVE-2019-15383](https://cve.now/CVE-2019-15383.md): The Allview X5 Android device with a build fingerprint of ALLVIEW/X5\_Soul\_Mini/X5\_Soul\_Mini:8.1.0/O11019/1522468763:userdebug/release-keys c (no CVSS)
- [CVE-2019-15382](https://cve.now/CVE-2019-15382.md): The Cubot Nova Android device with a build fingerprint of CUBOT/CUBOT\_NOVA/CUBOT\_NOVA:8.1.0/O11019/1527060122:user/release-keys contains a p (no CVSS)
- [CVE-2019-15381](https://cve.now/CVE-2019-15381.md): The BQ 5515L Android device with a build fingerprint of BQru/BQru-5515L/BQru-5515L:8.1.0/O11019/20180409.195525:user/release-keys contains a (no CVSS)
- [CVE-2019-15380](https://cve.now/CVE-2019-15380.md): The Fly Photo Pro Android device with a build fingerprint of Fly/PhotoPro/Photo\_Pro:8.1.0/O11019/1528117003:user/release-keys contains a pre (no CVSS)
- [CVE-2019-15379](https://cve.now/CVE-2019-15379.md): The Walton Primo G3 Android device with a build fingerprint of WALTON/Primo\_GM3/Primo\_GM3:8.1.0/O11019/1522737198:user/release-keys contains (no CVSS)
- [CVE-2019-15378](https://cve.now/CVE-2019-15378.md): The Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGA\_Ray\_600/ELUGA\_Ray\_600:8.1.0/O11019/1532692680:user/re (no CVSS)
- [CVE-2019-15377](https://cve.now/CVE-2019-15377.md): The Cherry Flare S7 Android device with a build fingerprint of Cherry\_Mobile/Flare\_S7\_Deluxe/Flare\_S7\_Deluxe:8.1.0/O11019/1533920920:user/re (no CVSS)
- [CVE-2019-15376](https://cve.now/CVE-2019-15376.md): The Panasonic Eluga Ray 530 Android device with a build fingerprint of Panasonic/ELUGA\_Ray\_530/ELUGA\_Ray\_530:8.1.0/O11019/1531828974:user/re (no CVSS)
- [CVE-2019-15375](https://cve.now/CVE-2019-15375.md): The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1522294799:user/release-keys contains a pre-install (no CVSS)
- [CVE-2019-15374](https://cve.now/CVE-2019-15374.md): The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88\_lite/iris88\_lite:8.1.0/O11019/1536323070:user/release-keys cont (no CVSS)
- [CVE-2019-15373](https://cve.now/CVE-2019-15373.md): The Symphony i95 Lite Android device with a build fingerprint of LAVA/iris88\_lite/iris88\_lite:8.1.0/O11019/1536323070:user/release-keys cont (no CVSS)
- [CVE-2019-15372](https://cve.now/CVE-2019-15372.md): The Hisense F17 Android device with a build fingerprint of Hisense/F17\_4G/HS6739MT:8.1.0/O11019/Hisense\_F17\_4G\_00\_S01:user/release-keys cont (no CVSS)
- [CVE-2019-15371](https://cve.now/CVE-2019-15371.md): The Symphony G100 Android device with a build fingerprint of Symphony/G100/G100:8.1.0/O11019/1530618779:user/release-keys contains a pre-ins (no CVSS)
- [CVE-2019-15370](https://cve.now/CVE-2019-15370.md): The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/1526527761:user/release-keys contains a pre-install (no CVSS)
- [CVE-2019-15369](https://cve.now/CVE-2019-15369.md): The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61\_Turbo/Z61\_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a (no CVSS)
- [CVE-2019-15368](https://cve.now/CVE-2019-15368.md): The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains (no CVSS)
- [CVE-2019-15367](https://cve.now/CVE-2019-15367.md): The Haier P10 Android device with a build fingerprint of Haier/P10/P10:8.1.0/O11019/1532662449:user/release-keys contains a pre-installed ap (no CVSS)
- [CVE-2019-15366](https://cve.now/CVE-2019-15366.md): The Infinix Note 5 Android device with a build fingerprint of Infinix/H633IJL/Infinix-X604\_sprout:8.1.0/O11019/IJL-180531V181:user/release-k (no CVSS)
- [CVE-2019-15365](https://cve.now/CVE-2019-15365.md): The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app (no CVSS)
- [CVE-2019-15364](https://cve.now/CVE-2019-15364.md): The Dexp BL250 Android device with a build fingerprint of DEXP/BL250/BL250:8.1.0/O11019/1530858027:user/release-keys contains a pre-installe (no CVSS)
- [CVE-2019-15363](https://cve.now/CVE-2019-15363.md): The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power\_5/Power\_5:8.1.0/O11019/1532686195:user/release-keys contains a pr (no CVSS)
- [CVE-2019-15362](https://cve.now/CVE-2019-15362.md): The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88\_go/iris88\_go:8.1.0/O11019/1538188945:user/release-keys contains a (no CVSS)
- [CVE-2019-15361](https://cve.now/CVE-2019-15361.md): The Infinix Note 5 Android device with a build fingerprint of Infinix/H632C/Infinix-X605\_sprout:8.1.0/O11019/CE-180914V59:user/release-keys (no CVSS)
- [CVE-2019-15360](https://cve.now/CVE-2019-15360.md): The Hisense U965 Android device with a build fingerprint of Hisense/U965\_4G\_10/HS6739MT:8.1.0/O11019/Hisense\_U965\_4G\_10\_S01:user/release-key (no CVSS)
- [CVE-2019-15359](https://cve.now/CVE-2019-15359.md): The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed (no CVSS)
- [CVE-2019-15358](https://cve.now/CVE-2019-15358.md): The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed a (no CVSS)
- [CVE-2019-15357](https://cve.now/CVE-2019-15357.md): The Advan i6A Android device with a build fingerprint of ADVAN/i6A/i6A:8.1.0/O11019/1523602705:userdebug/test-keys contains a pre-installed (no CVSS)
- [CVE-2019-15356](https://cve.now/CVE-2019-15356.md): The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed a (no CVSS)
- [CVE-2019-15355](https://cve.now/CVE-2019-15355.md): The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a (no CVSS)
- [CVE-2019-15354](https://cve.now/CVE-2019-15354.md): The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone\_Armor\_5/Ulefone\_Armor\_5:8.1.0/O11019/1528806701:user/release- (no CVSS)
- [CVE-2019-15353](https://cve.now/CVE-2019-15353.md): The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installe (no CVSS)
- [CVE-2019-15352](https://cve.now/CVE-2019-15352.md): The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains (no CVSS)
- [CVE-2019-15351](https://cve.now/CVE-2019-15351.md): The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-i (no CVSS)
- [CVE-2019-15350](https://cve.now/CVE-2019-15350.md): The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-i (no CVSS)
- [CVE-2019-15349](https://cve.now/CVE-2019-15349.md): The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre- (no CVSS)
- [CVE-2019-15348](https://cve.now/CVE-2019-15348.md): The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre- (no CVSS)
- [CVE-2019-15347](https://cve.now/CVE-2019-15347.md): The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contain (no CVSS)
- [CVE-2019-15346](https://cve.now/CVE-2019-15346.md): The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contain (no CVSS)
- [CVE-2019-15345](https://cve.now/CVE-2019-15345.md): The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a (no CVSS)
- [CVE-2019-15344](https://cve.now/CVE-2019-15344.md): The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a (no CVSS)
- [CVE-2019-15343](https://cve.now/CVE-2019-15343.md): The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a (no CVSS)
- [CVE-2019-15342](https://cve.now/CVE-2019-15342.md): The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys cont (no CVSS)
- [CVE-2019-15341](https://cve.now/CVE-2019-15341.md): The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys cont (no CVSS)
- [CVE-2019-15340](https://cve.now/CVE-2019-15340.md): The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura\_india/sakura\_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:us (no CVSS)
- [CVE-2019-15339](https://cve.now/CVE-2019-15339.md): The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed a (no CVSS)
- [CVE-2019-15338](https://cve.now/CVE-2019-15338.md): The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88\_lite/iris88\_lite:8.1.0/O11019/1536323070:user/release-keys cont (no CVSS)
- [CVE-2019-15337](https://cve.now/CVE-2019-15337.md): The Lava Z81 Android device with a build fingerprint of LAVA/Z81/Z81:8.1.0/O11019/1532317309:user/release-keys contains a pre-installed app (no CVSS)
- [CVE-2019-15336](https://cve.now/CVE-2019-15336.md): The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61\_Turbo/Z61\_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a (no CVSS)
- [CVE-2019-15335](https://cve.now/CVE-2019-15335.md): The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app (no CVSS)
- [CVE-2019-15334](https://cve.now/CVE-2019-15334.md): The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88\_go/iris88\_go:8.1.0/O11019/1538188945:user/release-keys contains a (no CVSS)
- [CVE-2019-15333](https://cve.now/CVE-2019-15333.md): The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed a (no CVSS)
- [CVE-2012-1160](https://cve.now/CVE-2012-1160.md): Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php (no CVSS, Moodle)
- [CVE-2019-15744](https://cve.now/CVE-2019-15744.md): The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyaki\_softbank/keyaki\_softbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517 (no CVSS)
- [CVE-2019-15411](https://cve.now/CVE-2019-15411.md): The Asus ZenFone 3 Laser Android device with a build fingerprint of asus/WW\_msm8937/msm8937:7.1.1/NMF26F/WW\_32.40.106.114\_20180928:user/rele (no CVSS)
- [CVE-2012-1159](https://cve.now/CVE-2012-1159.md): Moodle before 2.2.2: Overview report allows users to see hidden courses (no CVSS, Moodle · moodle/moodle)
- [CVE-2019-15332](https://cve.now/CVE-2019-15332.md): The Lava Z61 Android device with a build fingerprint of LAVA/Z61\_2GB/Z61\_2GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-instal (no CVSS)
- [CVE-2012-1158](https://cve.now/CVE-2012-1158.md): Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export (no CVSS, Moodle)
- [CVE-2012-1157](https://cve.now/CVE-2012-1157.md): Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default (no CVSS, Moodle · moodle/moodle)
- [CVE-2012-1156](https://cve.now/CVE-2012-1156.md): Moodle before 2.2.2 has users' private files included in course backups (no CVSS, Moodle · moodle/moodle)
- [CVE-2012-1168](https://cve.now/CVE-2012-1168.md): Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified (no CVSS, Moodle)
- [CVE-2012-1155](https://cve.now/CVE-2012-1155.md): Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even th (no CVSS, Moodle)
- [CVE-2019-8248](https://cve.now/CVE-2019-8248.md): Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator CC)
- [CVE-2019-8247](https://cve.now/CVE-2019-8247.md): Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Illustrator CC)
- [CVE-2019-8246](https://cve.now/CVE-2019-8246.md): Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. (CVSS 9.8, Adobe Media Encoder)
- [CVE-2019-8244](https://cve.now/CVE-2019-8244.md): Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. (CVSS 4.3, Adobe Media Encoder)
- [CVE-2019-8243](https://cve.now/CVE-2019-8243.md): Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. (CVSS 4.3, Adobe Media Encoder)
- [CVE-2019-8242](https://cve.now/CVE-2019-8242.md): Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. (CVSS 4.3, Adobe Media Encoder)
- [CVE-2019-8241](https://cve.now/CVE-2019-8241.md): Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. (CVSS 4.3, Adobe Media Encoder)
- [CVE-2019-8240](https://cve.now/CVE-2019-8240.md): Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2019-8239](https://cve.now/CVE-2019-8239.md): Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2019-7962](https://cve.now/CVE-2019-7962.md): Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Illustrator CC)
- [CVE-2019-7960](https://cve.now/CVE-2019-7960.md): Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Animate CC)
- [CVE-2019-18646](https://cve.now/CVE-2019-18646.md): The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when lo (no CVSS)
- [CVE-2019-18647](https://cve.now/CVE-2019-18647.md): The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user. (no CVSS)
- [CVE-2019-18648](https://cve.now/CVE-2019-18648.md): When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input f (no CVSS)
- [CVE-2019-18649](https://cve.now/CVE-2019-18649.md): When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS. (no CVSS)
- [CVE-2019-18895](https://cve.now/CVE-2019-18895.md): Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Troja (no CVSS)
- [CVE-2019-18957](https://cve.now/CVE-2019-18957.md): Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS. (no CVSS)
- [CVE-2019-18885](https://cve.now/CVE-2019-18885.md): fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs\_verify\_dev\_extents NULL pointer dereference via a crafted btrfs image becau (no CVSS)
- [CVE-2019-18949](https://cve.now/CVE-2019-18949.md): SnowHaze before 2.6.6 is sometimes too late to honor a per-site JavaScript blocking setting, which leads to unintended JavaScript execution (no CVSS)
- [CVE-2019-16863](https://cve.now/CVE-2019-16863.md): STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing at (no CVSS)
- [CVE-2011-1930](https://cve.now/CVE-2011-1930.md): In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. (no CVSS, klibc)
- [CVE-2011-1588](https://cve.now/CVE-2011-1588.md): Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error. (no CVSS, thunar)
- [CVE-2011-1490](https://cve.now/CVE-2011-1490.md): A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and som (no CVSS, rsyslog)
- [CVE-2011-1489](https://cve.now/CVE-2011-1489.md): A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and so (no CVSS, rsyslog)
- [CVE-2011-1488](https://cve.now/CVE-2011-1488.md): A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. (no CVSS, rsyslog)
- [CVE-2011-1145](https://cve.now/CVE-2011-1145.md): The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVE (no CVSS, unixodbc)
- [CVE-2011-1136](https://cve.now/CVE-2011-1136.md): In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file. (no CVSS)
- [CVE-2011-1070](https://cve.now/CVE-2011-1070.md): v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. (no CVSS, v86d)
- [CVE-2019-3640](https://cve.now/CVE-2019-3640.md): Data Loss Prevention - Unprotected Transport of Credentials (CVSS 4.8, McAfee Data Loss Prevention)
- [CVE-2019-14818](https://cve.now/CVE-2019-14818.md): A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a (CVSS 7.5, dpdk)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.