# CVEs published 2019-12-18

365 CVEs were published on December 18, 2019: 1 critical, 10 high. 6 are now in CISA KEV. Days are UTC.

- [CVE-2019-19899](https://cve.now/CVE-2019-19899.md): Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because (no CVSS, io.pebbletemplates:pebble-project)
- [CVE-2019-17390](https://cve.now/CVE-2019-17390.md): An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. (CVSS 8.2)
- [CVE-2019-19788](https://cve.now/CVE-2019-19788.md): Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. (no CVSS, Opera Software AS Opera for Android)
- [CVE-2019-11108](https://cve.now/CVE-2019-11108.md): Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially (no CVSS, Intel(R) CSME)
- [CVE-2019-11086](https://cve.now/CVE-2019-11086.md): Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable e (no CVSS, Intel(R) AMT)
- [CVE-2019-11110](https://cve.now/CVE-2019-11110.md): Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) (no CVSS, Intel(R) CSME, Intel(R) TXE)
- [CVE-2019-11109](https://cve.now/CVE-2019-11109.md): Logic issue in the subsystem for Intel(R) SPS before versions SPS\_E5\_04.01.04.275.0, SPS\_SoC-X\_04.00.04.100.0 and SPS\_SoC-A\_04.00.04.191.0 m (no CVSS, Intel(R) SPS)
- [CVE-2019-11107](https://cve.now/CVE-2019-11107.md): Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enab (no CVSS, Intel(R) AMT)
- [CVE-2019-11106](https://cve.now/CVE-2019-11106.md): Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE befor (no CVSS, Intel(R) CSME)
- [CVE-2019-11102](https://cve.now/CVE-2019-11102.md): Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 1 (no CVSS, Intel(R) DAL software for Intel(R) CSME)
- [CVE-2019-11100](https://cve.now/CVE-2019-11100.md): Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthe (no CVSS, Intel(R) AMT)
- [CVE-2019-11101](https://cve.now/CVE-2019-11101.md): Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; (no CVSS, Intel(R) CSME, Intel(R) TXE)
- [CVE-2019-11087](https://cve.now/CVE-2019-11087.md): Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; (no CVSS, Intel(R) CSME, Intel(R) TXE)
- [CVE-2019-0168](https://cve.now/CVE-2019-0168.md): Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions (no CVSS, Intel(R) CSME, Intel(R) TXE)
- [CVE-2019-0166](https://cve.now/CVE-2019-0166.md): Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthe (no CVSS, Intel(R) AMT)
- [CVE-2019-0165](https://cve.now/CVE-2019-0165.md): Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to (no CVSS, Intel(R) CSME)
- [CVE-2019-11090](https://cve.now/CVE-2019-11090.md): Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; (no CVSS, Intel(R) PTT)
- [CVE-2019-0131](https://cve.now/CVE-2019-0131.md): Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthentica (no CVSS, Intel(R) AMT)
- [CVE-2019-11103](https://cve.now/CVE-2019-11103.md): Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authent (no CVSS, Intel(R) CSME)
- [CVE-2019-11097](https://cve.now/CVE-2019-11097.md): Improper directory permissions in the installer for Intel(R) Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70 (no CVSS, Intel(R) Management Engine)
- [CVE-2019-11104](https://cve.now/CVE-2019-11104.md): Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10 (no CVSS, Intel(R) CSME)
- [CVE-2019-11131](https://cve.now/CVE-2019-11131.md): Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potent (no CVSS, Intel(R) AMT)
- [CVE-2019-11088](https://cve.now/CVE-2019-11088.md): Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthentica (no CVSS, Intel(R) AMT)
- [CVE-2019-11105](https://cve.now/CVE-2019-11105.md): Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable es (no CVSS, Intel(R) CSME)
- [CVE-2019-11147](https://cve.now/CVE-2019-11147.md): Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70 (no CVSS, Intel(R) CSME)
- [CVE-2019-11132](https://cve.now/CVE-2019-11132.md): Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to pot (no CVSS, Intel(R) AMT)
- [CVE-2019-0169](https://cve.now/CVE-2019-0169.md): Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4. (no CVSS, Intel(R) TXE)
- [CVE-2019-18781](https://cve.now/CVE-2019-18781.md): An open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before 5809 that allows attackers to force users w (no CVSS)
- [CVE-2019-15589](https://cve.now/CVE-2019-15589.md): An improper access control vulnerability exists in Gitlab \<v12.3.2, \<v12.2.6, \<v12.1.12 which would allow a blocked user would be able to us (no CVSS, GitLab CE/EE)
- [CVE-2019-5487](https://cve.now/CVE-2019-5487.md): An improper access control vulnerability exists in Gitlab EE \<v12.3.3, \<v12.2.7, & \<v12.1.13 that allowed the group search feature with Elas (no CVSS, GitLab EE)
- [CVE-2019-15575](https://cve.now/CVE-2019-15575.md): A command injection exists in GitLab CE/EE \<v12.3.2, \<v12.2.6, and \<v12.1.12 that allowed an attacker to inject commands via the API through (no CVSS, GitLab CE/EE)
- [CVE-2019-15576](https://cve.now/CVE-2019-15576.md): An information disclosure vulnerability exists in GitLab CE/EE \<v12.3.2, \<v12.2.6, and \<v12.1.12 that allowed an attacker to view private sy (no CVSS, GitLab CE/EE)
- [CVE-2019-15577](https://cve.now/CVE-2019-15577.md): An information disclosure vulnerability exists in GitLab CE/EE \<v12.3.2, \<v12.2.6, and \<v12.1.12 that allowed project milestones to be discl (no CVSS, GitLab CE/EE)
- [CVE-2019-5469](https://cve.now/CVE-2019-5469.md): An IDOR vulnerability exists in GitLab \<v12.1.2, \<v12.0.4, and \<v11.11.6 that allowed uploading files from project archive to replace other (no CVSS, GitLab)
- [CVE-2019-15580](https://cve.now/CVE-2019-15580.md): An information exposure vulnerability exists in gitlab.com \<v12.3.2, \<v12.2.6, and \<v12.1.10 when using the blocking merge request feature, (no CVSS, gitlab.com)
- [CVE-2019-15596](https://cve.now/CVE-2019-15596.md): A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within t (no CVSS, statics-server)
- [CVE-2019-15597](https://cve.now/CVE-2019-15597.md): A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input. (no CVSS, node-df)
- [CVE-2019-5486](https://cve.now/CVE-2019-5486.md): A authentication bypass vulnerability exists in GitLab CE/EE \<v12.3.2, \<v12.2.6, and \<v12.1.10 in the Salesforce login integration that coul (no CVSS, GitLab CE/EE)
- [CVE-2019-15598](https://cve.now/CVE-2019-15598.md): A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the c (no CVSS, treekill · tree-kill)
- [CVE-2019-15599](https://cve.now/CVE-2019-15599.md): A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the (no CVSS, tree-kill)
- [CVE-2019-15600](https://cve.now/CVE-2019-15600.md): A Path traversal exists in http\_server which allows an attacker to read arbitrary system files. (no CVSS, http\_server)
- [CVE-2019-19724](https://cve.now/CVE-2019-19724.md): Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could (no CVSS, github.com/sylabs/singularity)
- [CVE-2019-5078](https://cve.now/CVE-2019-5078.md): An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03. (no CVSS, WAGO PFC200 · WAGO PFC100)
- [CVE-2019-5075](https://cve.now/CVE-2019-5075.md): An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03. (no CVSS, WAGO PFC200 · WAGO PFC100)
- [CVE-2019-5073](https://cve.now/CVE-2019-5073.md): An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions (no CVSS, WAGO PFC200 · WAGO PFC100)
- [CVE-2019-15591](https://cve.now/CVE-2019-15591.md): An improper access control vulnerability exists in GitLab \<12.3.3 that allows an attacker to obtain container and dependency scanning report (no CVSS, GitLab)
- [CVE-2019-18573](https://cve.now/CVE-2019-18573.md): The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Session Fixation vulner (CVSS 8.7, Dell RSA Identity Governance & Lifecycle)
- [CVE-2019-18572](https://cve.now/CVE-2019-18572.md): The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authenticatio (CVSS 8.3, Dell RSA Identity Governance & Lifecycle)
- [CVE-2019-18571](https://cve.now/CVE-2019-18571.md): The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site sc (CVSS 5.4, Dell RSA Identity Governance & Lifecycle)
- [CVE-2019-5080](https://cve.now/CVE-2019-5080.md): An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03 (no CVSS, WAGO PFC200 · WAGO PFC100)
- [CVE-2019-5079](https://cve.now/CVE-2019-5079.md): An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions (no CVSS, WAGO PFC200 · WAGO PFC100)
- [CVE-2019-18996](https://cve.now/CVE-2019-18996.md): ABB PB610 HMIStudio accepts malicious DLL file in an application (CVSS 7.1, ABB PB610 Panel Builder)
- [CVE-2019-18997](https://cve.now/CVE-2019-18997.md): PB610 HMISimulator provides interface with access to arbitrary files (CVSS 4.3, ABB PB610 Panel Builder)
- [CVE-2019-18994](https://cve.now/CVE-2019-18994.md): ABB PB610 HMIStudio crashes after launching an empty \*.JPR application file (CVSS 3.9, ABB PB610 Panel Builder)
- [CVE-2019-18995](https://cve.now/CVE-2019-18995.md): ABB PB610 HMISimulator does not check content-length of the HTTP request (CVSS 4.3, ABB PB610 Panel Builder)
- [CVE-2019-1387](https://cve.now/CVE-2019-1387.md): An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. (no CVSS, Microsoft Git)
- [CVE-2019-5081](https://cve.now/CVE-2019-5081.md): An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version (no CVSS, WAGO PFC200 · WAGO PFC100)
- [CVE-2019-5077](https://cve.now/CVE-2019-5077.md): An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 0 (no CVSS, WAGO PFC200 · WAGO PFC100)
- [CVE-2019-7621](https://cve.now/CVE-2019-7621.md): Kibana versions before 6.8.6 and 7.5.1 contain a cross site scripting (XSS) flaw in the coordinate and region map visualizations. (no CVSS, Elastic Kibana)
- [CVE-2019-11995](https://cve.now/CVE-2019-11995.md): Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data. (no CVSS, HPE IOT + GCP)
- [CVE-2019-18267](https://cve.now/CVE-2019-18267.md): An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. (no CVSS, GE S2020/S2020G Fast Switch)
- [CVE-2019-5074](https://cve.now/CVE-2019-5074.md): An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware versio (no CVSS, WAGO PFC200 · WAGO PFC100)
- [CVE-2019-16782](https://cve.now/CVE-2019-16782.md): Possible Information Leak / Session Hijack Vulnerability in Rack (CVSS 6.3, rack)
- [CVE-2019-19890](https://cve.now/CVE-2019-19890.md): An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817\_1855 devices. (no CVSS)
- [CVE-2019-19889](https://cve.now/CVE-2019-19889.md): An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817\_1855 devices. (no CVSS)
- [CVE-2019-19887](https://cve.now/CVE-2019-19887.md): bitstr\_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif\_encode. (no CVSS)
- [CVE-2019-19888](https://cve.now/CVE-2019-19888.md): jfif\_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error. (no CVSS)
- [CVE-2019-19689](https://cve.now/CVE-2019-19689.md): Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL Hijack related to a vulnerability on the pa (no CVSS, Trend Micro HouseCall for Home Networks)
- [CVE-2019-19690](https://cve.now/CVE-2019-19690.md): Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass (no CVSS, Trend Micro Mobile Security for Android)
- [CVE-2019-19688](https://cve.now/CVE-2019-19688.md): A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited allowing an a (no CVSS, Trend Micro HouseCall for Home Networks)
- [CVE-2012-2656](https://cve.now/CVE-2012-2656.md): An XML eXternal Entity (XXE) issue exists in Restlet 1.1.10 in an endpoint using XML transport, which lets a remote attacker obtain sensitiv (no CVSS, www.restlet.org/ Restlet)
- [CVE-2019-19844](https://cve.now/CVE-2019-19844.md): Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. (no CVSS, django)
- [CVE-2012-2312](https://cve.now/CVE-2012-2312.md): An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, (no CVSS, JBoss AS 7 JBoss)
- [CVE-2019-8763](https://cve.now/CVE-2019-8763.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8783](https://cve.now/CVE-2019-8783.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8785](https://cve.now/CVE-2019-8785.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8787](https://cve.now/CVE-2019-8787.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8794](https://cve.now/CVE-2019-8794.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8797](https://cve.now/CVE-2019-8797.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8798](https://cve.now/CVE-2019-8798.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8803](https://cve.now/CVE-2019-8803.md): An authentication issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8808](https://cve.now/CVE-2019-8808.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8811](https://cve.now/CVE-2019-8811.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8812](https://cve.now/CVE-2019-8812.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8813](https://cve.now/CVE-2019-8813.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8814](https://cve.now/CVE-2019-8814.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8815](https://cve.now/CVE-2019-8815.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8816](https://cve.now/CVE-2019-8816.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8817](https://cve.now/CVE-2019-8817.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple macOS)
- [CVE-2019-8819](https://cve.now/CVE-2019-8819.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8820](https://cve.now/CVE-2019-8820.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8821](https://cve.now/CVE-2019-8821.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8822](https://cve.now/CVE-2019-8822.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8823](https://cve.now/CVE-2019-8823.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8849](https://cve.now/CVE-2019-8849.md): The issue was addressed by signaling that an executable stack is not required. (no CVSS, Apple Swift-Ubuntu)
- [CVE-2019-8707](https://cve.now/CVE-2019-8707.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple tvOS · Apple iTunes for Windows +1)
- [CVE-2019-8719](https://cve.now/CVE-2019-8719.md): A logic issue was addressed with improved state management. (no CVSS, Apple tvOS · Apple iTunes for Windows +1)
- [CVE-2019-8726](https://cve.now/CVE-2019-8726.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple tvOS · Apple iTunes for Windows +1)
- [CVE-2019-8733](https://cve.now/CVE-2019-8733.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple tvOS · Apple iTunes for Windows +1)
- [CVE-2019-8735](https://cve.now/CVE-2019-8735.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple tvOS · Apple iTunes for Windows +1)
- [CVE-2019-8745](https://cve.now/CVE-2019-8745.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS · Apple tvOS +2)
- [CVE-2019-8747](https://cve.now/CVE-2019-8747.md): A memory corruption vulnerability was addressed with improved locking. (no CVSS, Apple watchOS)
- [CVE-2019-8755](https://cve.now/CVE-2019-8755.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2019-8760](https://cve.now/CVE-2019-8760.md): This issue was addressed by improving Face ID machine learning models. (no CVSS, Apple iOS)
- [CVE-2019-8766](https://cve.now/CVE-2019-8766.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple watchOS · Apple iCloud for Windows)
- [CVE-2019-8775](https://cve.now/CVE-2019-8775.md): The issue was addressed by restricting options offered on a locked device. (no CVSS, Apple iOS)
- [CVE-2019-8782](https://cve.now/CVE-2019-8782.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8784](https://cve.now/CVE-2019-8784.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8786](https://cve.now/CVE-2019-8786.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8788](https://cve.now/CVE-2019-8788.md): An issue existed in the parsing of URLs. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8789](https://cve.now/CVE-2019-8789.md): A validation issue existed in the handling of symlinks. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8791](https://cve.now/CVE-2019-8791.md): An issue existed in the parsing of URL schemes. (no CVSS, Apple Shazam-Android · Apple Shazam-iOS)
- [CVE-2019-8792](https://cve.now/CVE-2019-8792.md): An injection issue was addressed with improved validation. (no CVSS, Apple Shazam-Android · Apple Shazam-iOS)
- [CVE-2019-8793](https://cve.now/CVE-2019-8793.md): A consistency issue existed in deciding when to show the screen recording indicator. (no CVSS, Apple iOS)
- [CVE-2019-8795](https://cve.now/CVE-2019-8795.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS)
- [CVE-2019-8800](https://cve.now/CVE-2019-8800.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple Xcode)
- [CVE-2019-8801](https://cve.now/CVE-2019-8801.md): A dynamic library loading issue existed in iTunes setup. (no CVSS, Apple macOS · Apple iTunes for Windows)
- [CVE-2019-8802](https://cve.now/CVE-2019-8802.md): A validation issue was addressed with improved logic. (no CVSS, Apple macOS)
- [CVE-2019-8804](https://cve.now/CVE-2019-8804.md): An inconsistency in Wi-Fi network configuration settings was addressed. (no CVSS, Apple iOS)
- [CVE-2019-8805](https://cve.now/CVE-2019-8805.md): A validation issue existed in the entitlement verification. (no CVSS, Apple macOS)
- [CVE-2019-8806](https://cve.now/CVE-2019-8806.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple Xcode)
- [CVE-2019-8807](https://cve.now/CVE-2019-8807.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8697](https://cve.now/CVE-2019-8697.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8698](https://cve.now/CVE-2019-8698.md): A validation issue existed in the entitlement verification. (no CVSS, Apple iOS · Apple tvOS)
- [CVE-2019-8699](https://cve.now/CVE-2019-8699.md): A logic issue existed in the handling of answering phone calls. (no CVSS, Apple iOS)
- [CVE-2019-8701](https://cve.now/CVE-2019-8701.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8704](https://cve.now/CVE-2019-8704.md): An authentication issue was addressed with improved state management. (no CVSS, Apple tvOS)
- [CVE-2019-8705](https://cve.now/CVE-2019-8705.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple macOS · Apple tvOS)
- [CVE-2019-8710](https://cve.now/CVE-2019-8710.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iCloud for Windows)
- [CVE-2019-8711](https://cve.now/CVE-2019-8711.md): A logic issue existed with the display of notification previews. (no CVSS, Apple iOS)
- [CVE-2019-8721](https://cve.now/CVE-2019-8721.md): Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. (no CVSS, Apple Xcode)
- [CVE-2019-8722](https://cve.now/CVE-2019-8722.md): Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. (no CVSS, Apple Xcode)
- [CVE-2019-8723](https://cve.now/CVE-2019-8723.md): Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. (no CVSS, Apple Xcode)
- [CVE-2019-8724](https://cve.now/CVE-2019-8724.md): Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. (no CVSS, Apple Xcode)
- [CVE-2019-8725](https://cve.now/CVE-2019-8725.md): The issue was addressed with improved handling of service worker lifetime. (no CVSS, Apple Safari)
- [CVE-2019-8727](https://cve.now/CVE-2019-8727.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS)
- [CVE-2019-8731](https://cve.now/CVE-2019-8731.md): A permissions issue existed in which execute permission was incorrectly granted. (no CVSS, Apple iOS)
- [CVE-2019-8739](https://cve.now/CVE-2019-8739.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple Xcode)
- [CVE-2019-8742](https://cve.now/CVE-2019-8742.md): The issue was addressed by restricting options offered on a locked device. (no CVSS, Apple iOS)
- [CVE-2019-8748](https://cve.now/CVE-2019-8748.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8750](https://cve.now/CVE-2019-8750.md): Multiple memory corruption issues were addressed with improved input validation. (no CVSS, Apple watchOS · Apple iCloud for Windows)
- [CVE-2019-8757](https://cve.now/CVE-2019-8757.md): A race condition existed when reading and writing user preferences. (no CVSS, Apple macOS)
- [CVE-2019-8758](https://cve.now/CVE-2019-8758.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8764](https://cve.now/CVE-2019-8764.md): A logic issue was addressed with improved state management. (no CVSS, Apple watchOS)
- [CVE-2019-8765](https://cve.now/CVE-2019-8765.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple watchOS)
- [CVE-2019-8768](https://cve.now/CVE-2019-8768.md): "Clear History and Website Data" did not clear the history. (no CVSS, Apple macOS)
- [CVE-2019-8769](https://cve.now/CVE-2019-8769.md): An issue existed in the drawing of web page elements. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8770](https://cve.now/CVE-2019-8770.md): The issue was addressed with improved permissions logic. (no CVSS, Apple macOS)
- [CVE-2019-8772](https://cve.now/CVE-2019-8772.md): An issue existed in the handling of links in encrypted PDFs. (no CVSS, Apple macOS)
- [CVE-2019-8779](https://cve.now/CVE-2019-8779.md): A logic issue applied the incorrect restrictions. (no CVSS, Apple iOS)
- [CVE-2019-8781](https://cve.now/CVE-2019-8781.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2019-8674](https://cve.now/CVE-2019-8674.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple Safari)
- [CVE-2019-8676](https://cve.now/CVE-2019-8676.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8677](https://cve.now/CVE-2019-8677.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8678](https://cve.now/CVE-2019-8678.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8679](https://cve.now/CVE-2019-8679.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8680](https://cve.now/CVE-2019-8680.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8681](https://cve.now/CVE-2019-8681.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8682](https://cve.now/CVE-2019-8682.md): The issue was addressed with improved UI handling. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2019-8683](https://cve.now/CVE-2019-8683.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8684](https://cve.now/CVE-2019-8684.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8685](https://cve.now/CVE-2019-8685.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8686](https://cve.now/CVE-2019-8686.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8687](https://cve.now/CVE-2019-8687.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8688](https://cve.now/CVE-2019-8688.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8689](https://cve.now/CVE-2019-8689.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8690](https://cve.now/CVE-2019-8690.md): A logic issue existed in the handling of document loads. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8691](https://cve.now/CVE-2019-8691.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple macOS)
- [CVE-2019-8692](https://cve.now/CVE-2019-8692.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple macOS)
- [CVE-2019-8693](https://cve.now/CVE-2019-8693.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple macOS)
- [CVE-2019-8694](https://cve.now/CVE-2019-8694.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8695](https://cve.now/CVE-2019-8695.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8717](https://cve.now/CVE-2019-8717.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS · Apple tvOS)
- [CVE-2019-8730](https://cve.now/CVE-2019-8730.md): The contents of locked notes sometimes appeared in search results. (no CVSS, Apple macOS)
- [CVE-2019-8738](https://cve.now/CVE-2019-8738.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple Xcode)
- [CVE-2019-8743](https://cve.now/CVE-2019-8743.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple watchOS)
- [CVE-2019-8629](https://cve.now/CVE-2019-8629.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8632](https://cve.now/CVE-2019-8632.md): Some analytics data was sent using HTTP rather than HTTPS. (no CVSS, Apple Texture-iOS · Apple Texture-Android)
- [CVE-2019-8634](https://cve.now/CVE-2019-8634.md): An authentication issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2019-8635](https://cve.now/CVE-2019-8635.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8637](https://cve.now/CVE-2019-8637.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2019-8641](https://cve.now/CVE-2019-8641.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS · Apple watchOS +1)
- [CVE-2019-8646](https://cve.now/CVE-2019-8646.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8647](https://cve.now/CVE-2019-8647.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2019-8648](https://cve.now/CVE-2019-8648.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8649](https://cve.now/CVE-2019-8649.md): A logic issue existed in the handling of synchronous page loads. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8654](https://cve.now/CVE-2019-8654.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Apple Safari)
- [CVE-2019-8657](https://cve.now/CVE-2019-8657.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8658](https://cve.now/CVE-2019-8658.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8659](https://cve.now/CVE-2019-8659.md): This issue was addressed with improved checks. (no CVSS, Apple watchOS)
- [CVE-2019-8660](https://cve.now/CVE-2019-8660.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8661](https://cve.now/CVE-2019-8661.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2019-8662](https://cve.now/CVE-2019-8662.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8663](https://cve.now/CVE-2019-8663.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8665](https://cve.now/CVE-2019-8665.md): A denial of service issue was addressed with improved validation. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2019-8666](https://cve.now/CVE-2019-8666.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8667](https://cve.now/CVE-2019-8667.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2019-8669](https://cve.now/CVE-2019-8669.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8670](https://cve.now/CVE-2019-8670.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Apple macOS · Apple Safari)
- [CVE-2019-8671](https://cve.now/CVE-2019-8671.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8672](https://cve.now/CVE-2019-8672.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8673](https://cve.now/CVE-2019-8673.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8562](https://cve.now/CVE-2019-8562.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple iOS · Apple tvOS +2)
- [CVE-2019-8563](https://cve.now/CVE-2019-8563.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8568](https://cve.now/CVE-2019-8568.md): A validation issue existed in the handling of symlinks. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8571](https://cve.now/CVE-2019-8571.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8574](https://cve.now/CVE-2019-8574.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8576](https://cve.now/CVE-2019-8576.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8577](https://cve.now/CVE-2019-8577.md): An input validation issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8583](https://cve.now/CVE-2019-8583.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8584](https://cve.now/CVE-2019-8584.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8585](https://cve.now/CVE-2019-8585.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8586](https://cve.now/CVE-2019-8586.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8587](https://cve.now/CVE-2019-8587.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8594](https://cve.now/CVE-2019-8594.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8611](https://cve.now/CVE-2019-8611.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8615](https://cve.now/CVE-2019-8615.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8616](https://cve.now/CVE-2019-8616.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8619](https://cve.now/CVE-2019-8619.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8622](https://cve.now/CVE-2019-8622.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8623](https://cve.now/CVE-2019-8623.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8624](https://cve.now/CVE-2019-8624.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple watchOS)
- [CVE-2019-8625](https://cve.now/CVE-2019-8625.md): A logic issue was addressed with improved state management. (no CVSS, Apple tvOS · Apple iTunes for Windows +1)
- [CVE-2019-8626](https://cve.now/CVE-2019-8626.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2019-8628](https://cve.now/CVE-2019-8628.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8630](https://cve.now/CVE-2019-8630.md): The issue was addressed with improved UI handling. (no CVSS, Apple iOS)
- [CVE-2019-8644](https://cve.now/CVE-2019-8644.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8560](https://cve.now/CVE-2019-8560.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8561](https://cve.now/CVE-2019-8561.md): A logic issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2019-8565](https://cve.now/CVE-2019-8565.md): A race condition was addressed with additional validation. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8566](https://cve.now/CVE-2019-8566.md): An API issue existed in the handling of microphone data. (no CVSS, Apple iOS)
- [CVE-2019-8567](https://cve.now/CVE-2019-8567.md): A user privacy issue was addressed by removing the broadcast MAC address. (no CVSS, Apple iOS)
- [CVE-2019-8589](https://cve.now/CVE-2019-8589.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2019-8591](https://cve.now/CVE-2019-8591.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8593](https://cve.now/CVE-2019-8593.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2019-8595](https://cve.now/CVE-2019-8595.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8596](https://cve.now/CVE-2019-8596.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8597](https://cve.now/CVE-2019-8597.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8598](https://cve.now/CVE-2019-8598.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8600](https://cve.now/CVE-2019-8600.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8601](https://cve.now/CVE-2019-8601.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8602](https://cve.now/CVE-2019-8602.md): A memory corruption issue was addressed by removing the vulnerable code. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8603](https://cve.now/CVE-2019-8603.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple macOS)
- [CVE-2019-8604](https://cve.now/CVE-2019-8604.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2019-8605](https://cve.now/CVE-2019-8605.md): A use after free issue was addressed with improved memory management. (CVSS 7.8, KEV, Apple iOS · Apple macOS +2)
- [CVE-2019-8606](https://cve.now/CVE-2019-8606.md): A validation issue existed in the handling of symlinks. (no CVSS, Apple macOS)
- [CVE-2019-8607](https://cve.now/CVE-2019-8607.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS +5)
- [CVE-2019-8608](https://cve.now/CVE-2019-8608.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8609](https://cve.now/CVE-2019-8609.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8610](https://cve.now/CVE-2019-8610.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8613](https://cve.now/CVE-2019-8613.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2019-8617](https://cve.now/CVE-2019-8617.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple iOS)
- [CVE-2019-8620](https://cve.now/CVE-2019-8620.md): A user privacy issue was addressed by removing the broadcast MAC address. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2019-8527](https://cve.now/CVE-2019-8527.md): A buffer overflow was addressed with improved size validation. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8529](https://cve.now/CVE-2019-8529.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8530](https://cve.now/CVE-2019-8530.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple macOS +1)
- [CVE-2019-8533](https://cve.now/CVE-2019-8533.md): A lock handling issue was addressed with improved lock handling. (no CVSS, Apple macOS)
- [CVE-2019-8535](https://cve.now/CVE-2019-8535.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8536](https://cve.now/CVE-2019-8536.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8537](https://cve.now/CVE-2019-8537.md): An access issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2019-8540](https://cve.now/CVE-2019-8540.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8541](https://cve.now/CVE-2019-8541.md): A privacy issue existed in motion sensor calibration. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2019-8542](https://cve.now/CVE-2019-8542.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-8544](https://cve.now/CVE-2019-8544.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8545](https://cve.now/CVE-2019-8545.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8546](https://cve.now/CVE-2019-8546.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple iOS · Apple macOS +1)
- [CVE-2019-8548](https://cve.now/CVE-2019-8548.md): An issue existed where partially entered passcodes may not clear when the device went to sleep. (no CVSS, Apple watchOS)
- [CVE-2019-8549](https://cve.now/CVE-2019-8549.md): Multiple input validation issues existed in MIG generated code. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8550](https://cve.now/CVE-2019-8550.md): An issue existed in the pausing of FaceTime video. (no CVSS, Apple iOS · Apple macOS +1)
- [CVE-2019-8551](https://cve.now/CVE-2019-8551.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8552](https://cve.now/CVE-2019-8552.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8553](https://cve.now/CVE-2019-8553.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2019-8554](https://cve.now/CVE-2019-8554.md): A permissions issue existed in the handling of motion and orientation data. (no CVSS, Apple iOS)
- [CVE-2019-8555](https://cve.now/CVE-2019-8555.md): A buffer overflow was addressed with improved size validation. (no CVSS, Apple macOS)
- [CVE-2019-8556](https://cve.now/CVE-2019-8556.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8558](https://cve.now/CVE-2019-8558.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8559](https://cve.now/CVE-2019-8559.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8590](https://cve.now/CVE-2019-8590.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2019-8599](https://cve.now/CVE-2019-8599.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS)
- [CVE-2019-7286](https://cve.now/CVE-2019-7286.md): A memory corruption issue was addressed with improved input validation. (CVSS 7.8, KEV, Apple iOS · Apple macOS)
- [CVE-2019-7290](https://cve.now/CVE-2019-7290.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple Shortcuts)
- [CVE-2019-7292](https://cve.now/CVE-2019-7292.md): A validation issue was addressed with improved logic. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-7293](https://cve.now/CVE-2019-7293.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8502](https://cve.now/CVE-2019-8502.md): An API issue existed in the handling of dictation requests. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8503](https://cve.now/CVE-2019-8503.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8504](https://cve.now/CVE-2019-8504.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8505](https://cve.now/CVE-2019-8505.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS · Apple Safari)
- [CVE-2019-8506](https://cve.now/CVE-2019-8506.md): A type confusion issue was addressed with improved memory handling. (CVSS 8.8, KEV, Apple iOS · Apple tvOS +4)
- [CVE-2019-8507](https://cve.now/CVE-2019-8507.md): Multiple memory corruption issues were addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2019-8508](https://cve.now/CVE-2019-8508.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2019-8510](https://cve.now/CVE-2019-8510.md): An out-of-bounds read issue existed that led to the disclosure of kernel memory. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8511](https://cve.now/CVE-2019-8511.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +1)
- [CVE-2019-8512](https://cve.now/CVE-2019-8512.md): This issue was addressed with improved transparency. (no CVSS, Apple iOS)
- [CVE-2019-8513](https://cve.now/CVE-2019-8513.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2019-8514](https://cve.now/CVE-2019-8514.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8515](https://cve.now/CVE-2019-8515.md): A cross-origin issue existed with the fetch API. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8516](https://cve.now/CVE-2019-8516.md): A validation issue was addressed with improved logic. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8517](https://cve.now/CVE-2019-8517.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-8518](https://cve.now/CVE-2019-8518.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2019-8519](https://cve.now/CVE-2019-8519.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2019-8520](https://cve.now/CVE-2019-8520.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2019-8521](https://cve.now/CVE-2019-8521.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2019-8522](https://cve.now/CVE-2019-8522.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2019-8523](https://cve.now/CVE-2019-8523.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8524](https://cve.now/CVE-2019-8524.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-8526](https://cve.now/CVE-2019-8526.md): A use after free issue was addressed with improved memory management. (CVSS 7.8, KEV, Apple macOS)
- [CVE-2019-6201](https://cve.now/CVE-2019-6201.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-6204](https://cve.now/CVE-2019-6204.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS · Apple Safari)
- [CVE-2019-6207](https://cve.now/CVE-2019-6207.md): An out-of-bounds read issue existed that led to the disclosure of kernel memory. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2019-6222](https://cve.now/CVE-2019-6222.md): A consistency issue was addressed with improved state handling. (no CVSS, Apple iOS)
- [CVE-2019-6232](https://cve.now/CVE-2019-6232.md): A race condition existed during the installation of iTunes for Windows. (no CVSS, Apple iCloud for Windows)
- [CVE-2019-6236](https://cve.now/CVE-2019-6236.md): A race condition existed during the installation of iCloud for Windows. (no CVSS, Apple iCloud for Windows)
- [CVE-2019-6237](https://cve.now/CVE-2019-6237.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2019-6239](https://cve.now/CVE-2019-6239.md): This issue was addressed with improved handling of file metadata. (no CVSS, Apple macOS)
- [CVE-2019-7284](https://cve.now/CVE-2019-7284.md): This issue was addressed with improved checks. (no CVSS, Apple iOS)
- [CVE-2019-7285](https://cve.now/CVE-2019-7285.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2019-7287](https://cve.now/CVE-2019-7287.md): A memory corruption issue was addressed with improved input validation. (CVSS 7.8, KEV, Apple iOS)
- [CVE-2019-7289](https://cve.now/CVE-2019-7289.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple Shortcuts)
- [CVE-2019-19829](https://cve.now/CVE-2019-19829.md): A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability t (no CVSS)
- [CVE-2019-19832](https://cve.now/CVE-2019-19832.md): Xerox AltaLink C8035 printers allow CSRF. (no CVSS)
- [CVE-2019-19833](https://cve.now/CVE-2019-19833.md): In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (no CVSS)
- [CVE-2019-4716](https://cve.now/CVE-2019-4716.md): IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin (CVSS 10.0, KEV, IBM Planning Analytics)
- [CVE-2019-4609](https://cve.now/CVE-2019-4609.md): IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive infor (CVSS 5.9, IBM API Connect)
- [CVE-2019-11992](https://cve.now/CVE-2019-11992.md): A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting. (no CVSS, HPE OneView for VMware vCenter with Operations Manager and…)
- [CVE-2019-19882](https://cve.now/CVE-2019-19882.md): shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because (no CVSS)
- [CVE-2019-11400](https://cve.now/CVE-2019-11400.md): An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. (no CVSS)
- [CVE-2019-11399](https://cve.now/CVE-2019-11399.md): An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. (no CVSS)
- [CVE-2019-5152](https://cve.now/CVE-2019-5152.md): An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. (CVSS 7.4, Shadowsocks)
- [CVE-2019-19235](https://cve.now/CVE-2019-19235.md): AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution with no additional exe (no CVSS)
- [CVE-2019-4388](https://cve.now/CVE-2019-4388.md): HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript (no CVSS, HCL AppScan Source)
- [CVE-2019-19742](https://cve.now/CVE-2019-19742.md): On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field. (no CVSS)
- [CVE-2019-2304](https://cve.now/CVE-2019-2304.md): Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10614](https://cve.now/CVE-2019-10614.md): Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious f (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2242](https://cve.now/CVE-2019-2242.md): Device memory may get corrupted because of buffer overflow/underflow. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2274](https://cve.now/CVE-2019-2274.md): Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics C (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10607](https://cve.now/CVE-2019-10607.md): Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10600](https://cve.now/CVE-2019-10600.md): Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in Snapdr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2019-10601](https://cve.now/CVE-2019-10601.md): Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10605](https://cve.now/CVE-2019-10605.md): Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdrag (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10595](https://cve.now/CVE-2019-10595.md): Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10598](https://cve.now/CVE-2019-10598.md): Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop f (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10572](https://cve.now/CVE-2019-10572.md): Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10584](https://cve.now/CVE-2019-10584.md): Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10544](https://cve.now/CVE-2019-10544.md): Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon Auto (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10557](https://cve.now/CVE-2019-10557.md): Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10564](https://cve.now/CVE-2019-10564.md): Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10536](https://cve.now/CVE-2019-10536.md): Potential double free scenario if driver receives another DIAG\_EVENT\_LOG\_SUPPORTED event from firmware as the pointer is not set to NULL on (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10537](https://cve.now/CVE-2019-10537.md): Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and e (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10518](https://cve.now/CVE-2019-10518.md): Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon C (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10525](https://cve.now/CVE-2019-10525.md): Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10516](https://cve.now/CVE-2019-10516.md): Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Comput (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10517](https://cve.now/CVE-2019-10517.md): Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10487](https://cve.now/CVE-2019-10487.md): Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10500](https://cve.now/CVE-2019-10500.md): While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, Snapd (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10513](https://cve.now/CVE-2019-10513.md): Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Com (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10481](https://cve.now/CVE-2019-10481.md): Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10482](https://cve.now/CVE-2019-10482.md): Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channe (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11980](https://cve.now/CVE-2018-11980.md): When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma\_process\_bip, buffer overflow will happen (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-10480](https://cve.now/CVE-2019-10480.md): Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon Auto (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2019-19880](https://cve.now/CVE-2019-19880.md): exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values i (no CVSS)
- [CVE-2019-19846](https://cve.now/CVE-2019-19846.md): In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors. (no CVSS)
- [CVE-2019-19845](https://cve.now/CVE-2019-19845.md): In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure. (no CVSS)
- [CVE-2019-15013](https://cve.now/CVE-2019-15013.md): The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5 (no CVSS, Atlassian Jira)
- [CVE-2019-19775](https://cve.now/CVE-2019-19775.md): The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users. (no CVSS)
- [CVE-2018-1311](https://cve.now/CVE-2018-1311.md): The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. (no CVSS, Apache Software Foundation Apache Xerces-C)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.