Browse CVEs

HIGH 7.5 CVE-2019-0166 Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated … Active Management Technology Firmware 11.8.70 / 11.11.70+ Fix from $1,9502019-12-18 MEDIUM 6.5 CVE-2019-18994 Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load… Pb610 Panel Builder 600 after 2.8.0.424 Fix from $1,6002019-12-18 MEDIUM 5.3 CVE-2019-18995 The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests… Pb610 Panel Builder 600 after 2.8.0.424 Fix from $1,6002019-12-18 MEDIUM 5.5 CVE-2019-8817 A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.1. An application may be able to read … Mac Os X 10.15.1+ Fix from $1,6002019-12-18 MEDIUM 5.5 CVE-2019-8794 A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2… Ipados 6.1 / 10.15.1+ Fix from $1,6002019-12-18 HIGH 7.8 CVE-2019-8802 A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious application may be able to gain root… Mac Os X 10.15.1+ Fix from $1,9502019-12-18 HIGH 7.5 CVE-2019-8788 An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, ma… Ipados 10.15.1 / 13.2+ Fix from $1,9502019-12-18 HIGH 8.8 CVE-2019-8724 Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code w… Xcode 11.0+ Fix from $1,9502019-12-18 MEDIUM 5.3 CVE-2019-8711 A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. No… Iphone Os 13.0+ Fix from $1,6002019-12-18 HIGH 8.8 CVE-2019-8721 Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code w… Xcode 11.0+ Fix from $1,9502019-12-18 HIGH 8.8 CVE-2019-8722 Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code w… Xcode 11.0+ Fix from $1,9502019-12-18 HIGH 8.8 CVE-2019-8723 Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code w… Xcode 11.0+ Fix from $1,9502019-12-18 MEDIUM 6.5 CVE-2019-8654 An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website… Safari 13.0.1+ Fix from $1,6002019-12-18 HIGH 7.5 CVE-2019-8665 A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, watchOS 5.3. A remote attacker may cause an unexpe… Iphone Os 5.3 / 12.4+ Fix from $1,9502019-12-18 MEDIUM 6.5 CVE-2019-8626 An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously craf… Iphone Os 5.2.1 / 12.3+ Fix from $1,6002019-12-18 HIGH 7.8 CVE-2019-8637 An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious applic… Iphone Os 5.2.1 / 12.3+ Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-8561EPSS 7% A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to elevate pri… Mac Os X 10.14.4+ Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-8549 Multiple input validation issues existed in MIG generated code. These issues were addressed with improved validation. This issue is fixed in iOS 12.2… Iphone Os 5.2 / 10.14.4+ Fix from $1,9502019-12-18 MEDIUM 6.5 CVE-2019-8515 A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safar… Safari 7.11 / 12.1+ Fix from $1,6002019-12-18 HIGH 7.5 CVE-2019-8516 A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a mal… Iphone Os 5.2 / 10.14.4+ Fix from $1,9502019-12-18 MEDIUM 6.5 CVE-2019-7292 A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows… Safari 5.2 / 7.11+ Fix from $1,6002019-12-18 HIGH 8.8 CVE-2019-8503 A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for … Safari 7.11 / 12.1+ Fix from $1,9502019-12-18 MEDIUM 5.5 CVE-2019-8507 Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.4. Processing malicious da… Mac Os X 10.14.4+ Fix from $1,6002019-12-18 HIGH 7.8 CVE-2019-2304 Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Elec… Ipq4019 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10595 Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.5 CVE-2014-8179 Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representat… Cs Engine 1.6.2-cs7 / 1.8.3+ Fix from $1,9502019-12-17 MEDIUM 5.5 CVE-2014-8178 Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier… Cs Engine 1.6.2-cs7 / 1.8.3+ Fix from $1,6002019-12-17 MEDIUM 6.7 CVE-2019-14609 Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access. Nuc 8 Mainstream Game Kit Firmware 0036 / 0043+ Fix from $1,6002019-12-16 MEDIUM 6.5 CVE-2019-5260 Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value wh… Y9 2019 Firmware Mitigation only Fix from $1,6002019-12-13 CRITICAL 9.1 CVE-2019-13932 A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web application requests could be manipulated, causing the the application … Xhq 6.0.0.2+ Fix from $2,3002019-12-12