Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Input ValidationCWE-20 × clear
Active Management Technology Firmware HIGH 7.5
CVE-2019-0166

Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated …

Fix: 11.8.70 / 11.11.70+
Fix from $1,950 2019-12-18
Pb610 Panel Builder 600 MEDIUM 6.5
CVE-2019-18994

Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load…

Fix: after 2.8.0.424
Fix from $1,600 2019-12-18
Pb610 Panel Builder 600 MEDIUM 5.3
CVE-2019-18995

The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests…

Fix: after 2.8.0.424
Fix from $1,600 2019-12-18
Mac Os X MEDIUM 5.5
CVE-2019-8817

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.1. An application may be able to read …

Fix: 10.15.1+
Fix from $1,600 2019-12-18
Ipados MEDIUM 5.5
CVE-2019-8794

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2…

Fix: 6.1 / 10.15.1+
Fix from $1,600 2019-12-18
Mac Os X HIGH 7.8
CVE-2019-8802

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious application may be able to gain root…

Fix: 10.15.1+
Fix from $1,950 2019-12-18
Ipados HIGH 7.5
CVE-2019-8788

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, ma…

Fix: 10.15.1 / 13.2+
Fix from $1,950 2019-12-18
Xcode HIGH 8.8
CVE-2019-8724

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code w…

Fix: 11.0+
Fix from $1,950 2019-12-18
Iphone Os MEDIUM 5.3
CVE-2019-8711

A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. No…

Fix: 13.0+
Fix from $1,600 2019-12-18
Xcode HIGH 8.8
CVE-2019-8721

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code w…

Fix: 11.0+
Fix from $1,950 2019-12-18
Xcode HIGH 8.8
CVE-2019-8722

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code w…

Fix: 11.0+
Fix from $1,950 2019-12-18
Xcode HIGH 8.8
CVE-2019-8723

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code w…

Fix: 11.0+
Fix from $1,950 2019-12-18
Safari MEDIUM 6.5
CVE-2019-8654

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website…

Fix: 13.0.1+
Fix from $1,600 2019-12-18
Iphone Os HIGH 7.5
CVE-2019-8665

A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, watchOS 5.3. A remote attacker may cause an unexpe…

Fix: 5.3 / 12.4+
Fix from $1,950 2019-12-18
Iphone Os MEDIUM 6.5
CVE-2019-8626

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously craf…

Fix: 5.2.1 / 12.3+
Fix from $1,600 2019-12-18
Iphone Os HIGH 7.8
CVE-2019-8637

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious applic…

Fix: 5.2.1 / 12.3+
Fix from $1,950 2019-12-18
Mac Os X HIGH 7.8
CVE-2019-8561EPSS 7%

A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to elevate pri…

Fix: 10.14.4+
Fix from $1,950 2019-12-18
Iphone Os HIGH 7.8
CVE-2019-8549

Multiple input validation issues existed in MIG generated code. These issues were addressed with improved validation. This issue is fixed in iOS 12.2…

Fix: 5.2 / 10.14.4+
Fix from $1,950 2019-12-18
Safari MEDIUM 6.5
CVE-2019-8515

A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safar…

Fix: 7.11 / 12.1+
Fix from $1,600 2019-12-18
Iphone Os HIGH 7.5
CVE-2019-8516

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a mal…

Fix: 5.2 / 10.14.4+
Fix from $1,950 2019-12-18
Safari MEDIUM 6.5
CVE-2019-7292

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows…

Fix: 5.2 / 7.11+
Fix from $1,600 2019-12-18
Safari HIGH 8.8
CVE-2019-8503

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for …

Fix: 7.11 / 12.1+
Fix from $1,950 2019-12-18
Mac Os X MEDIUM 5.5
CVE-2019-8507

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.4. Processing malicious da…

Fix: 10.14.4+
Fix from $1,600 2019-12-18
Ipq4019 Firmware HIGH 7.8
CVE-2019-2304

Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Elec…

Patch available
Fix from $1,950 2019-12-18
Apq8009 Firmware HIGH 7.8
CVE-2019-10595

Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto…

Patch available
Fix from $1,950 2019-12-18
Cs Engine HIGH 7.5
CVE-2014-8179

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representat…

Fix: 1.6.2-cs7 / 1.8.3+
Fix from $1,950 2019-12-17
Cs Engine MEDIUM 5.5
CVE-2014-8178

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier…

Fix: 1.6.2-cs7 / 1.8.3+
Fix from $1,600 2019-12-17
Nuc 8 Mainstream Game Kit Firmware MEDIUM 6.7
CVE-2019-14609

Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.

Fix: 0036 / 0043+
Fix from $1,600 2019-12-16
Y9 2019 Firmware MEDIUM 6.5
CVE-2019-5260

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value wh…

Mitigation only
Fix from $1,600 2019-12-13
Xhq CRITICAL 9.1
CVE-2019-13932

A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web application requests could be manipulated, causing the the application …

Fix: 6.0.0.2+
Fix from $2,300 2019-12-12