CVEs published December 18, 2019
365 CVEs were published on December 18, 2019: 1 critical, 10 high. 6 are now in CISA KEV.
- Published
- 365
- Critical
- 1
- High
- 10
- Medium
- 5
- Low
- 1
- Unrated
- 348
- Now in CISA KEV
- 6
- Fix available
- 248
Most affected products
- Apple macOS
- 43
- Apple iOS · Apple macOS +4
- 34
- Apple iOS · Apple macOS +2
- 32
- Apple iOS · Apple tvOS +3
- 21
- Apple iOS
- 20
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 17
- Apple iOS · Apple macOS +5
- 14
- Apple iOS · Apple tvOS +4
- 11
- Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- 10
- Apple iOS · Apple macOS
- 9
Critical 1
High 10
- CVE-2019-17390An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77.
- CVE-2019-18573The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulnerDell RSA Identity Governance & Lifecycle
- CVE-2019-18572The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper AuthenticatioDell RSA Identity Governance & Lifecycle
- CVE-2019-18996ABB PB610 HMIStudio accepts malicious DLL file in an applicationABB PB610 Panel Builder
- CVE-2019-8605A use after free issue was addressed with improved memory management.Apple iOS · Apple macOS +2
- CVE-2019-7286A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS
- CVE-2019-8506A type confusion issue was addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8526A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2019-7287A memory corruption issue was addressed with improved input validation.Apple iOS
- CVE-2019-5152An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2.Shadowsocks
Medium, low and unrated 354
- CVE-2019-19899Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because io.pebbletemplates:pebble-project
- CVE-2019-19788Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack.Opera Software AS Opera for Android
- CVE-2019-11108Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially Intel(R) CSME
- CVE-2019-11086Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable eIntel(R) AMT
- CVE-2019-11110Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R)Intel(R) CSME, Intel(R) TXE
- CVE-2019-11109Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 mIntel(R) SPS
- CVE-2019-11107Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enabIntel(R) AMT
- CVE-2019-11106Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE beforIntel(R) CSME
- CVE-2019-11102Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 1Intel(R) DAL software for Intel(R) CSME
- CVE-2019-11100Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unautheIntel(R) AMT
- CVE-2019-11101Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) CSME, Intel(R) TXE
- CVE-2019-11087Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) CSME, Intel(R) TXE
- CVE-2019-0168Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions Intel(R) CSME, Intel(R) TXE
- CVE-2019-0166Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unautheIntel(R) AMT
- CVE-2019-0165Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to Intel(R) CSME
- CVE-2019-11090Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) PTT
- CVE-2019-0131Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticaIntel(R) AMT
- CVE-2019-11103Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authentIntel(R) CSME
- CVE-2019-11097Improper directory permissions in the installer for Intel(R) Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70Intel(R) Management Engine
- CVE-2019-11104Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10Intel(R) CSME
- CVE-2019-11131Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentIntel(R) AMT
- CVE-2019-11088Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticaIntel(R) AMT
- CVE-2019-11105Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable esIntel(R) CSME
- CVE-2019-11147Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70Intel(R) CSME
- CVE-2019-11132Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potIntel(R) AMT
- CVE-2019-0169Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.Intel(R) TXE
- CVE-2019-18781An open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before 5809 that allows attackers to force users w
- CVE-2019-15589An improper access control vulnerability exists in Gitlab <v12.3.2, <v12.2.6, <v12.1.12 which would allow a blocked user would be able to usGitLab CE/EE
- CVE-2019-5487An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with ElasGitLab EE
- CVE-2019-15575A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API throughGitLab CE/EE
- CVE-2019-15576An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private syGitLab CE/EE
- CVE-2019-15577An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed project milestones to be disclGitLab CE/EE
- CVE-2019-5469An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other GitLab
- CVE-2019-15580An information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when using the blocking merge request feature, gitlab.com
- CVE-2019-15596A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within tstatics-server
- CVE-2019-15597A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.node-df
- CVE-2019-5486A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that coulGitLab CE/EE
- CVE-2019-15598A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the ctreekill · tree-kill
- CVE-2019-15599A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the tree-kill
- CVE-2019-15600A Path traversal exists in http_server which allows an attacker to read arbitrary system files.http_server
- CVE-2019-19724Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could github.com/sylabs/singularity
- CVE-2019-5078An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.WAGO PFC200 · WAGO PFC100
- CVE-2019-5075An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.WAGO PFC200 · WAGO PFC100
- CVE-2019-5073An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions WAGO PFC200 · WAGO PFC100
- CVE-2019-15591An improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to obtain container and dependency scanning reportGitLab
- CVE-2019-18571The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scDell RSA Identity Governance & Lifecycle
- CVE-2019-5080An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03WAGO PFC200 · WAGO PFC100
- CVE-2019-5079An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions WAGO PFC200 · WAGO PFC100
- CVE-2019-18997PB610 HMISimulator provides interface with access to arbitrary filesABB PB610 Panel Builder
- CVE-2019-18994ABB PB610 HMIStudio crashes after launching an empty *.JPR application fileABB PB610 Panel Builder
- CVE-2019-18995ABB PB610 HMISimulator does not check content-length of the HTTP requestABB PB610 Panel Builder
- CVE-2019-1387An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.Microsoft Git
- CVE-2019-5081An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware versionWAGO PFC200 · WAGO PFC100
- CVE-2019-5077An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 0WAGO PFC200 · WAGO PFC100
- CVE-2019-7621Kibana versions before 6.8.6 and 7.5.1 contain a cross site scripting (XSS) flaw in the coordinate and region map visualizations.Elastic Kibana
- CVE-2019-11995Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data.HPE IOT + GCP
- CVE-2019-18267An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior.GE S2020/S2020G Fast Switch
- CVE-2019-5074An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware versioWAGO PFC200 · WAGO PFC100
- CVE-2019-16782Possible Information Leak / Session Hijack Vulnerability in Rackrack
- CVE-2019-19890An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices.
- CVE-2019-19889An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices.
- CVE-2019-19887bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode.
- CVE-2019-19888jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.
- CVE-2019-19689Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL Hijack related to a vulnerability on the paTrend Micro HouseCall for Home Networks
- CVE-2019-19690Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass Trend Micro Mobile Security for Android
- CVE-2019-19688A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited allowing an aTrend Micro HouseCall for Home Networks
- CVE-2012-2656An XML eXternal Entity (XXE) issue exists in Restlet 1.1.10 in an endpoint using XML transport, which lets a remote attacker obtain sensitivwww.restlet.org/ Restlet
- CVE-2019-19844Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover.django
- CVE-2012-2312An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, JBoss AS 7 JBoss
- CVE-2019-8763Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8783Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8785A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8787An out-of-bounds read was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2019-8794A validation issue was addressed with improved input sanitization.Apple iOS · Apple macOS +2
- CVE-2019-8797A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8798A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8803An authentication issue was addressed with improved state management.Apple iOS · Apple macOS +2
- CVE-2019-8808Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8811Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8812Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8813A logic issue was addressed with improved state management.Apple iOS · Apple tvOS +3
- CVE-2019-8814Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8815Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8816Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8817A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2019-8819Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8820Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8821Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8822Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8823Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8849The issue was addressed by signaling that an executable stack is not required.Apple Swift-Ubuntu
- CVE-2019-8707Multiple memory corruption issues were addressed with improved memory handling.Apple tvOS · Apple iTunes for Windows +1
- CVE-2019-8719A logic issue was addressed with improved state management.Apple tvOS · Apple iTunes for Windows +1
- CVE-2019-8726Multiple memory corruption issues were addressed with improved memory handling.Apple tvOS · Apple iTunes for Windows +1
- CVE-2019-8733Multiple memory corruption issues were addressed with improved memory handling.Apple tvOS · Apple iTunes for Windows +1
- CVE-2019-8735Multiple memory corruption issues were addressed with improved memory handling.Apple tvOS · Apple iTunes for Windows +1
- CVE-2019-8745A buffer overflow was addressed with improved bounds checking.Apple macOS · Apple tvOS +2
- CVE-2019-8747A memory corruption vulnerability was addressed with improved locking.Apple watchOS
- CVE-2019-8755A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2019-8760This issue was addressed by improving Face ID machine learning models.Apple iOS
- CVE-2019-8766Multiple memory corruption issues were addressed with improved memory handling.Apple watchOS · Apple iCloud for Windows
- CVE-2019-8775The issue was addressed by restricting options offered on a locked device.Apple iOS
- CVE-2019-8782Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8784A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8786A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8788An issue existed in the parsing of URLs.Apple iOS · Apple macOS
- CVE-2019-8789A validation issue existed in the handling of symlinks.Apple iOS · Apple macOS
- CVE-2019-8791An issue existed in the parsing of URL schemes.Apple Shazam-Android · Apple Shazam-iOS
- CVE-2019-8792An injection issue was addressed with improved validation.Apple Shazam-Android · Apple Shazam-iOS
- CVE-2019-8793A consistency issue existed in deciding when to show the screen recording indicator.Apple iOS
- CVE-2019-8795A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple tvOS
- CVE-2019-8800A memory corruption issue was addressed with improved validation.Apple Xcode
- CVE-2019-8801A dynamic library loading issue existed in iTunes setup.Apple macOS · Apple iTunes for Windows
- CVE-2019-8802A validation issue was addressed with improved logic.Apple macOS
- CVE-2019-8804An inconsistency in Wi-Fi network configuration settings was addressed.Apple iOS
- CVE-2019-8805A validation issue existed in the entitlement verification.Apple macOS
- CVE-2019-8806A memory corruption issue was addressed with improved validation.Apple Xcode
- CVE-2019-8807A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8697A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8698A validation issue existed in the entitlement verification.Apple iOS · Apple tvOS
- CVE-2019-8699A logic issue existed in the handling of answering phone calls.Apple iOS
- CVE-2019-8701A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8704An authentication issue was addressed with improved state management.Apple tvOS
- CVE-2019-8705A memory corruption issue was addressed with improved validation.Apple macOS · Apple tvOS
- CVE-2019-8710Multiple memory corruption issues were addressed with improved memory handling.Apple iCloud for Windows
- CVE-2019-8711A logic issue existed with the display of notification previews.Apple iOS
- CVE-2019-8721Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.Apple Xcode
- CVE-2019-8722Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.Apple Xcode
- CVE-2019-8723Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.Apple Xcode
- CVE-2019-8724Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.Apple Xcode
- CVE-2019-8725The issue was addressed with improved handling of service worker lifetime.Apple Safari
- CVE-2019-8727A logic issue was addressed with improved state management.Apple iOS
- CVE-2019-8731A permissions issue existed in which execute permission was incorrectly granted.Apple iOS
- CVE-2019-8739A memory corruption issue was addressed with improved state management.Apple Xcode
- CVE-2019-8742The issue was addressed by restricting options offered on a locked device.Apple iOS
- CVE-2019-8748A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8750Multiple memory corruption issues were addressed with improved input validation.Apple watchOS · Apple iCloud for Windows
- CVE-2019-8757A race condition existed when reading and writing user preferences.Apple macOS
- CVE-2019-8758A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8764A logic issue was addressed with improved state management.Apple watchOS
- CVE-2019-8765Multiple memory corruption issues were addressed with improved memory handling.Apple watchOS
- CVE-2019-8768"Clear History and Website Data" did not clear the history.Apple macOS
- CVE-2019-8769An issue existed in the drawing of web page elements.Apple iOS · Apple macOS
- CVE-2019-8770The issue was addressed with improved permissions logic.Apple macOS
- CVE-2019-8772An issue existed in the handling of links in encrypted PDFs.Apple macOS
- CVE-2019-8779A logic issue applied the incorrect restrictions.Apple iOS
- CVE-2019-8781A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2019-8674A logic issue was addressed with improved state management.Apple iOS · Apple Safari
- CVE-2019-8676Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8677Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8678Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8679Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8680Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8681Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8682The issue was addressed with improved UI handling.Apple iOS · Apple watchOS
- CVE-2019-8683Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8684Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8685Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8686Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8687Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8688Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8689Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8690A logic issue existed in the handling of document loads.Apple iOS · Apple macOS +4
- CVE-2019-8691A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2019-8692A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2019-8693A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2019-8694A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8695A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8717A memory corruption issue was addressed with improved memory handling.Apple macOS · Apple tvOS
- CVE-2019-8730The contents of locked notes sometimes appeared in search results.Apple macOS
- CVE-2019-8738A memory corruption issue was addressed with improved state management.Apple Xcode
- CVE-2019-8743Multiple memory corruption issues were addressed with improved memory handling.Apple watchOS
- CVE-2019-8629A memory initialization issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8632Some analytics data was sent using HTTP rather than HTTPS.Apple Texture-iOS · Apple Texture-Android
- CVE-2019-8634An authentication issue was addressed with improved state management.Apple macOS
- CVE-2019-8635A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8637An input validation issue was addressed with improved input validation.Apple iOS · Apple tvOS +1
- CVE-2019-8641An out-of-bounds read was addressed with improved input validation.Apple iOS · Apple watchOS +1
- CVE-2019-8646An out-of-bounds read was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2019-8647A use after free issue was addressed with improved memory management.Apple iOS · Apple tvOS +1
- CVE-2019-8648A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2019-8649A logic issue existed in the handling of synchronous page loads.Apple iOS · Apple macOS +4
- CVE-2019-8654An inconsistent user interface issue was addressed with improved state management.Apple Safari
- CVE-2019-8657An out-of-bounds read was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2019-8658A logic issue was addressed with improved state management.Apple iOS · Apple macOS +5
- CVE-2019-8659This issue was addressed with improved checks.Apple watchOS
- CVE-2019-8660A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2019-8661A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2019-8662This issue was addressed with improved checks.Apple iOS · Apple macOS +2
- CVE-2019-8663This issue was addressed with improved checks.Apple iOS · Apple macOS
- CVE-2019-8665A denial of service issue was addressed with improved validation.Apple iOS · Apple watchOS
- CVE-2019-8666Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8667An inconsistent user interface issue was addressed with improved state management.Apple macOS
- CVE-2019-8669Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8670An inconsistent user interface issue was addressed with improved state management.Apple macOS · Apple Safari
- CVE-2019-8671Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8672Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8673Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8562A memory corruption issue was addressed with improved validation.Apple iOS · Apple tvOS +2
- CVE-2019-8563Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8568A validation issue existed in the handling of symlinks.Apple iOS · Apple macOS +2
- CVE-2019-8571Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8574A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8576An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2019-8577An input validation issue was addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8583Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8584Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8585An out-of-bounds read was addressed with improved input validation.Apple iOS · Apple macOS +2
- CVE-2019-8586Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8587Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8594Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8611Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8615Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8616A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8619Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8622Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8623Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8624An out-of-bounds read was addressed with improved input validation.Apple watchOS
- CVE-2019-8625A logic issue was addressed with improved state management.Apple tvOS · Apple iTunes for Windows +1
- CVE-2019-8626An input validation issue was addressed with improved input validation.Apple iOS · Apple watchOS
- CVE-2019-8628Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8630The issue was addressed with improved UI handling.Apple iOS
- CVE-2019-8644Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8560An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2019-8561A logic issue was addressed with improved validation.Apple macOS
- CVE-2019-8565A race condition was addressed with additional validation.Apple iOS · Apple macOS
- CVE-2019-8566An API issue existed in the handling of microphone data.Apple iOS
- CVE-2019-8567A user privacy issue was addressed by removing the broadcast MAC address.Apple iOS
- CVE-2019-8589This issue was addressed with improved checks.Apple macOS
- CVE-2019-8591A type confusion issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8593A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple tvOS +1
- CVE-2019-8595Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8596Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8597Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8598An input validation issue was addressed with improved input validation.Apple iOS · Apple macOS +4
- CVE-2019-8600A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS +4
- CVE-2019-8601Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +5
- CVE-2019-8602A memory corruption issue was addressed by removing the vulnerable code.Apple iOS · Apple macOS +4
- CVE-2019-8603A validation issue was addressed with improved input sanitization.Apple macOS
- CVE-2019-8604A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2019-8606A validation issue existed in the handling of symlinks.Apple macOS
- CVE-2019-8607An out-of-bounds read was addressed with improved input validation.Apple iOS · Apple macOS +5
- CVE-2019-8608Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8609Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8610Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-8613A use after free issue was addressed with improved memory management.Apple iOS · Apple tvOS +1
- CVE-2019-8617An access issue was addressed with additional sandbox restrictions.Apple iOS
- CVE-2019-8620A user privacy issue was addressed by removing the broadcast MAC address.Apple iOS · Apple tvOS +1
- CVE-2019-8527A buffer overflow was addressed with improved size validation.Apple iOS · Apple macOS +2
- CVE-2019-8529A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS
- CVE-2019-8530This issue was addressed with improved checks.Apple iOS · Apple macOS +1
- CVE-2019-8533A lock handling issue was addressed with improved lock handling.Apple macOS
- CVE-2019-8535A memory corruption issue was addressed with improved state management.Apple iOS · Apple tvOS +3
- CVE-2019-8536A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8537An access issue was addressed with improved memory management.Apple macOS
- CVE-2019-8540A memory initialization issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8541A privacy issue existed in motion sensor calibration.Apple iOS · Apple watchOS
- CVE-2019-8542A buffer overflow was addressed with improved bounds checking.Apple iOS · Apple macOS +4
- CVE-2019-8544A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8545A memory corruption issue was addressed with improved state management.Apple iOS · Apple macOS +2
- CVE-2019-8546An access issue was addressed with additional sandbox restrictions.Apple iOS · Apple macOS +1
- CVE-2019-8548An issue existed where partially entered passcodes may not clear when the device went to sleep.Apple watchOS
- CVE-2019-8549Multiple input validation issues existed in MIG generated code.Apple iOS · Apple macOS +2
- CVE-2019-8550An issue existed in the pausing of FaceTime video.Apple iOS · Apple macOS +1
- CVE-2019-8551A logic issue was addressed with improved validation.Apple iOS · Apple tvOS +3
- CVE-2019-8552A memory initialization issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8553A memory corruption issue was addressed with improved validation.Apple iOS · Apple tvOS +1
- CVE-2019-8554A permissions issue existed in the handling of motion and orientation data.Apple iOS
- CVE-2019-8555A buffer overflow was addressed with improved size validation.Apple macOS
- CVE-2019-8556A use after free issue was addressed with improved memory management.Apple iOS · Apple tvOS +3
- CVE-2019-8558Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8559Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8590A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2019-8599A logic issue was addressed with improved restrictions.Apple iOS
- CVE-2019-7290An access issue was addressed with additional sandbox restrictions.Apple Shortcuts
- CVE-2019-7292A validation issue was addressed with improved logic.Apple iOS · Apple tvOS +4
- CVE-2019-7293A memory corruption issue was addressed with improved memory handling.Apple iOS · Apple macOS +2
- CVE-2019-8502An API issue existed in the handling of dictation requests.Apple iOS · Apple macOS +2
- CVE-2019-8503A logic issue was addressed with improved validation.Apple iOS · Apple tvOS +3
- CVE-2019-8504A memory initialization issue was addressed with improved memory handling.Apple iOS · Apple macOS
- CVE-2019-8505A logic issue was addressed with improved validation.Apple iOS · Apple Safari
- CVE-2019-8507Multiple memory corruption issues were addressed with improved input validation.Apple macOS
- CVE-2019-8508A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2019-8510An out-of-bounds read issue existed that led to the disclosure of kernel memory.Apple iOS · Apple macOS +2
- CVE-2019-8511A buffer overflow issue was addressed with improved memory handling.Apple iOS · Apple macOS +1
- CVE-2019-8512This issue was addressed with improved transparency.Apple iOS
- CVE-2019-8513This issue was addressed with improved checks.Apple macOS
- CVE-2019-8514A logic issue was addressed with improved state management.Apple iOS · Apple macOS +2
- CVE-2019-8515A cross-origin issue existed with the fetch API.Apple iOS · Apple tvOS +3
- CVE-2019-8516A validation issue was addressed with improved logic.Apple iOS · Apple macOS +2
- CVE-2019-8517An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS +2
- CVE-2019-8518Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +4
- CVE-2019-8519An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2019-8520An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2019-8521This issue was addressed with improved checks.Apple iOS · Apple macOS
- CVE-2019-8522A logic issue was addressed with improved state management.Apple macOS
- CVE-2019-8523Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-8524Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-6201Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple tvOS +3
- CVE-2019-6204A logic issue was addressed with improved validation.Apple iOS · Apple Safari
- CVE-2019-6207An out-of-bounds read issue existed that led to the disclosure of kernel memory.Apple iOS · Apple macOS +2
- CVE-2019-6222A consistency issue was addressed with improved state handling.Apple iOS
- CVE-2019-6232A race condition existed during the installation of iTunes for Windows.Apple iCloud for Windows
- CVE-2019-6236A race condition existed during the installation of iCloud for Windows.Apple iCloud for Windows
- CVE-2019-6237Multiple memory corruption issues were addressed with improved memory handling.Apple iOS · Apple macOS +4
- CVE-2019-6239This issue was addressed with improved handling of file metadata.Apple macOS
- CVE-2019-7284This issue was addressed with improved checks.Apple iOS
- CVE-2019-7285A use after free issue was addressed with improved memory management.Apple iOS · Apple tvOS +3
- CVE-2019-7289A parsing issue in the handling of directory paths was addressed with improved path validation.Apple Shortcuts
- CVE-2019-19829A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability t
- CVE-2019-19832Xerox AltaLink C8035 printers allow CSRF.
- CVE-2019-19833In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server.
- CVE-2019-4609IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive inforIBM API Connect
- CVE-2019-11992A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting.HPE OneView for VMware vCenter with Operations Manager and…
- CVE-2019-19882shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because
- CVE-2019-11400An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices.
- CVE-2019-11399An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices.
- CVE-2019-19235AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution with no additional exe
- CVE-2019-4388HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScriptHCL AppScan Source
- CVE-2019-19742On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.
- CVE-2019-2304Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware.Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10614Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious fQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2242Device memory may get corrupted because of buffer overflow/underflow.Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-2274Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics CQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10607Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10600Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in SnapdrQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2019-10601Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10605Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in SnapdragQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10595Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in SnapdrQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10598Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop fQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10572Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in SnapdragonQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10584Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10544Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon AutoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10557Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length.Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10564Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, SnapQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10536Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10537Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10518Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon CQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10525Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10516Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon ComputQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10517Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon ConsQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10487Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10500While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10513Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon ComQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2019-10481Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10482Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channeQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11980When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-10480Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon AutoQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2019-19880exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values i
- CVE-2019-19846In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors.
- CVE-2019-19845In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure.
- CVE-2019-15013The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5Atlassian Jira
- CVE-2019-19775The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users.
- CVE-2018-1311The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs.Apache Software Foundation Apache Xerces-C