Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
November

CVEs published in November 2019

1,672 vulnerabilities, 196 critical, 11 exploited.

Known exploitedIn KEVPublic exploitFix available

apple ios, ipados, itunes +5 more +7 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8808Fix available8.8 HighNovember 4, 2019
apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8783Fix available8.8 HighNovember 4, 2019
apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8782Fix available8.8 HighNovember 4, 2019
apple icloud, icloud for windows, watchos +2 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8766Fix available8.8 HighNovember 4, 2019
apple watchos, webkitgtk webkitgtk\+ +1 moreA logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1....CVE-2019-8764Fix available6.1 MediumNovember 4, 2019
apple watchosMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8743Fix available8.8 HighNovember 4, 2019
apple icloud, icloud for windows +1 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8710Fix available8.8 HighNovember 4, 2019
google chromeUse after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to...CVE-2019-13721Fix available8.8 HighNovember 2, 2019
google chrome, chrome webaudio, opensuse leap +2 moreUse after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to...CVE-2019-13720In KEVPublic exploitFix availableEPSS 49.4%8.8 HighNovember 2, 2019
hyundai-pay kasse hk-1000 firmwareOn Hyundai Pay Kasse HK-1000 devices, a side channel for the row-based OLED display was found....CVE-2019-143604.6 MediumNovember 2, 2019
archos safe-tOn Archos Safe-T devices, a side channel for the row-based OLED display was found. The power...CVE-2019-143584.6 MediumNovember 2, 2019
shiftcrypto bitbox02On SHIFT BitBox02 devices, a side channel for the row-based OLED display was found. The power...CVE-2019-186734.6 MediumNovember 2, 2019
wpwham currency switcher for woocommerceAn issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user...CVE-2019-186686.5 MediumNovember 2, 2019
pfsense pfsense-pkg-freeradius3/usr/local/www/freeradius_view_config.php in the freeradius3 package before 0.15.7_3 for pfSense...CVE-2019-186676.1 MediumNovember 2, 2019
secudos domosThe Log module in SECUDOS DOMOS before 5.6 allows XSS.CVE-2019-186645.4 MediumNovember 2, 2019
secudos domosThe Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.CVE-2019-18665EPSS 15.8%7.5 HighNovember 2, 2019
youphptubeAn issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code...CVE-2019-186629.8 CriticalNovember 2, 2019
fastweb fastgate firmwareFastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain...CVE-2019-186617.5 HighNovember 2, 2019
ready wireless emergency alertsThe Wireless Emergency Alerts (WEA) protocol allows remote attackers to spoof a Presidential...CVE-2019-186595.3 MediumNovember 2, 2019
gnu cpio, redhat enterprise linux +1 moreIn all versions of cpio before 2.13 does not properly validate input files when generating TAR...CVE-2019-14866Fix available6.7 MediumNovember 2, 2019
gs-gplI race condition in Temp files was found in gs-gpl before 8.56 addons scripts.CVE-2005-23528.1 HighNovember 1, 2019
google chrome, opensuse backports sle +1 moreIncorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13719Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInsufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13718Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreIncorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13717Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed...CVE-2019-13716Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70...CVE-2019-13715Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to...CVE-2019-13714Fix available6.1 MediumNovember 1, 2019
google chrome, opensuse backports +1 moreInsufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13713Fix available6.5 MediumNovember 1, 2019
google chrome, opensuse backports +1 moreInsufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13711Fix available5.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70...CVE-2019-13710Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13709Fix available6.5 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed...CVE-2019-13708Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports +1 moreInsufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0...CVE-2019-13707Fix available5.5 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreOut of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13706Fix available7.8 HighNovember 1, 2019
google chrome, opensuse backports +1 moreInsufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an...CVE-2019-13705Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13704Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70...CVE-2019-13703Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreInappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70...CVE-2019-13702Fix available7.8 HighNovember 1, 2019
google chrome, opensuse backports sle +1 moreIncorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13701Fix available4.3 MediumNovember 1, 2019
google chrome, opensuse backports sle +1 moreOut of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13700Fix available8.8 HighNovember 1, 2019
google chrome, opensuse backports sle +1 moreUse after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had...CVE-2019-13699Fix available8.8 HighNovember 1, 2019
mutt, debian linux +1 moreMutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of...CVE-2005-2351Fix available5.5 MediumNovember 1, 2019
manageiq evm evm, red hat cloudforms 3.0, redhat cloudforms +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to...CVE-2013-01866.1 MediumNovember 1, 2019
openstack compute, keystone, redhat openstack +1 more +3 moreOpenStack Keystone and other components vulnerable to Improper Certificate ValidationCVE-2013-2255Fix available5.9 MediumNovember 1, 2019
avg anti-virusA Cross Site Scripting (XSS) issue exists in AVG AntiVirus (Internet Security Edition) 19.3.3084...CVE-2019-186546.1 MediumNovember 1, 2019
redisInsecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.CVE-2013-0180Fix available5.5 MediumNovember 1, 2019
redisInsecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.CVE-2013-0178Fix available5.5 MediumNovember 1, 2019
avast antivirusA Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and...CVE-2019-186536.1 MediumNovember 1, 2019
redhat openshift, openshift mongodb cartridge mongodb cartridge +1 morecartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly...CVE-2013-01657.3 HighNovember 1, 2019
websieveCross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject...CVE-2005-23506.1 MediumNovember 1, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open