Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
February

CVEs published in February 2019

853 vulnerabilities, 120 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

google chrome, fedoraproject fedora, redhat enterprise linux desktop +2 more +4 moreAn incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-57718.8 HighFebruary 18, 2019
google chrome, fedoraproject fedora, redhat enterprise linux desktop +2 more +4 moreIncorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81...CVE-2019-57618.8 HighFebruary 18, 2019
totaljs total.jsPath Traversal in total.jsCVE-2019-8903Fix availableEPSS 72.1%7.5 HighFebruary 18, 2019
lg lha.sysThe LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows...CVE-2019-83727.0 HighFebruary 18, 2019
mircmIRC before 7.55 allows remote command execution by using argument injection through custom URI...CVE-2019-6453Public exploitEPSS 54.6%8.1 HighFebruary 18, 2019
idreamsoft icmsAn issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users'...CVE-2019-89025.7 MediumFebruary 18, 2019
linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moreIn the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL...CVE-2019-8912Fix available7.8 HighFebruary 18, 2019
file project file, canonical ubuntu linux, debian linux +1 more +3 moredo_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of...CVE-2019-8907Fix available8.8 HighFebruary 18, 2019
file project file, apple iphone os, mac os x +4 more +6 moredo_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is...CVE-2019-8906Fix available4.4 MediumFebruary 18, 2019
file project file, canonical ubuntu linux, debian linux +1 more +3 moredo_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related...CVE-2019-8905Fix available4.4 MediumFebruary 18, 2019
txjia imcatimcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.CVE-2019-84365.4 MediumFebruary 18, 2019
phpmywindadmin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header.CVE-2019-84354.8 MediumFebruary 18, 2019
cmseasyIn CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.CVE-2019-84346.1 MediumFebruary 18, 2019
jtbc phpJTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type...CVE-2019-84337.5 HighFebruary 18, 2019
cmseasyIn CmsEasy 7.0, there is XSS via the ckplayer.php url parameter.CVE-2019-84326.1 MediumFebruary 18, 2019
zoneminderZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj]...CVE-2019-84299.8 CriticalFebruary 18, 2019
zoneminderZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql...CVE-2019-8428Fix available9.8 CriticalFebruary 18, 2019
zoneminderdaemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via...CVE-2019-84279.8 CriticalFebruary 18, 2019
zoneminderskins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array,...CVE-2019-8426Fix available6.1 MediumFebruary 18, 2019
zoneminderincludes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.CVE-2019-84256.1 MediumFebruary 18, 2019
zoneminderZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.CVE-2019-8424Fix available9.8 CriticalFebruary 18, 2019
zoneminderZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query]...CVE-2019-8423Fix available9.8 CriticalFebruary 18, 2019
systemd project systemd, canonical ubuntu linux, debian linux +19 more +21 moreAn issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus...CVE-2019-6454Fix available5.5 MediumFebruary 18, 2019
google chromeIncorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote...CVE-2019-5784Public exploitFix available6.5 MediumFebruary 18, 2019
google chrome, debian linux +1 moreMissing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81...CVE-2019-5783Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5782Public exploitFix availableEPSS 13.4%8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81...CVE-2019-5781Fix available6.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior...CVE-2019-5780Fix available7.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-5779Fix available4.3 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreA missing case for handling special schemes in permission request checks in Extensions in Google...CVE-2019-5778Fix available6.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81...CVE-2019-5777Fix available6.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81...CVE-2019-5776Fix available6.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81...CVE-2019-5775Fix available6.5 MediumFebruary 18, 2019
debian linux, google chrome, fedoraproject fedora +3 more +5 moreOmission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google...CVE-2019-5774Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-5773Fix available6.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreSharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0...CVE-2019-5772Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5770Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of invalid end character position when front rendering in Blink in Google...CVE-2019-5769Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreDevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to...CVE-2019-5768Fix available6.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0...CVE-2019-5767Fix available6.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81...CVE-2019-5766Fix available6.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreAn exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81...CVE-2019-5765Fix available5.5 MediumFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5764Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreFailure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5763Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81...CVE-2019-5762Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed...CVE-2019-5760Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to...CVE-2019-5759Fix available9.6 CriticalFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-5758Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreAn incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-5757Fix available8.8 HighFebruary 18, 2019
google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81...CVE-2019-5756Fix available8.8 HighFebruary 18, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open