Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
December

CVEs published in December 2019

1,536 vulnerabilities, 253 critical, 19 exploited.

Known exploitedIn KEVPublic exploitFix available

extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +1 moreUncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially...CVE-2019-14559Fix available7.5 HighDecember 31, 2019
intel bios, debian linux +1 moreInsufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core...CVE-2019-14558Fix available5.7 MediumDecember 31, 2019
gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory...CVE-2019-201595.5 MediumDecember 30, 2019
gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack...CVE-2019-201605.5 MediumDecember 30, 2019
gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based...CVE-2019-20161Fix available5.5 MediumDecember 30, 2019
gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based...CVE-2019-20162Fix available5.5 MediumDecember 30, 2019
gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL...CVE-2019-20163Fix available5.5 MediumDecember 30, 2019
gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL...CVE-2019-201645.5 MediumDecember 30, 2019
gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL...CVE-2019-20165Fix available5.5 MediumDecember 30, 2019
gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL...CVE-2019-201665.5 MediumDecember 30, 2019
gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL...CVE-2019-201675.5 MediumDecember 30, 2019
gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use...CVE-2019-201685.5 MediumDecember 30, 2019
gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use...CVE-2019-201695.5 MediumDecember 30, 2019
gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid...CVE-2019-20170Fix available5.5 MediumDecember 30, 2019
gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There are memory...CVE-2019-20171Fix available5.5 MediumDecember 30, 2019
sonicwall gms, global management system +1 moreA vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This...CVE-2019-74789.8 CriticalDecember 30, 2019
google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker...CVE-2019-13767Fix availableEPSS 15.5%8.8 HighDecember 30, 2019
cumin, redhat mrg management console +1 moreAn import error was introduced in Cumin in the code refactoring in r5310. Server certificate...CVE-2013-02647.5 HighDecember 30, 2019
gitlabAn issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x...CVE-2018-205075.3 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-205016.3 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11...CVE-2018-204997.2 HighDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-204984.3 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-204975.0 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before...CVE-2018-204965.4 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.3.x and 11.4.x before 11.4...CVE-2018-204955.3 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-204947.5 HighDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-204934.3 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x...CVE-2018-204915.4 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before...CVE-2018-204905.4 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-204895.3 MediumDecember 30, 2019
gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before...CVE-2018-204884.3 MediumDecember 30, 2019
openshift enterprise, red hat, inc. openshift enterprise, redhat openshift +2 moreA CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic...CVE-2013-0196Fix available6.5 MediumDecember 30, 2019
textproc/isearch package package, openbsd textproc\/isearch +1 moreThe isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create...CVE-2012-56637.5 HighDecember 30, 2019
freeciv, fedoraproject fedora +1 moreA denial of service flaw was found in the way the server component of Freeciv before 2.3.4...CVE-2012-5645Fix available7.5 HighDecember 30, 2019
openstack horizon, python-django-horizon, redhat openstack +2 more +4 moreThe file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS...CVE-2012-5474Fix available5.5 MediumDecember 30, 2019
dlink dgs-1510-20 firmware, dgs-1510-28 firmware, dgs-1510-28p firmware +5 more +7 moreA security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1...CVE-2018-78596.1 MediumDecember 30, 2019
xmlblueprintXMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is:...CVE-2019-19032Public exploit8.1 HighDecember 30, 2019
prasathmani tiny file manager, tiny file manager file manager +1 moreRemote Code Execution in Tiny File ManagerCVE-2019-167906.5 MediumDecember 30, 2019
edit-xml easy xml editorEasy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is:...CVE-2019-19031Public exploit8.1 HighDecember 30, 2019
debian linux, openstack horizon, openstack-dashboard +2 moreWithin the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum...CVE-2012-54765.5 MediumDecember 30, 2019
kind-of project kind-ofValidation Bypass in kind-ofCVE-2019-20149Public exploitFix available7.5 HighDecember 30, 2019
ros ros-commAn issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic...CVE-2019-13445Fix available9.8 CriticalDecember 30, 2019
ros ros-commAn issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic...CVE-2019-13465Fix available8.6 HighDecember 30, 2019
tinywallAn attacker who has already compromised the local system could use TinyWall Controller to gain...CVE-2019-19470Public exploit7.8 HighDecember 30, 2019
mfscripts yetishare_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message...CVE-2019-198065.3 MediumDecember 30, 2019
mfscripts yetishare_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 takes a different...CVE-2019-198055.3 MediumDecember 30, 2019
mfscripts yetisharelog_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the...CVE-2019-197386.1 MediumDecember 30, 2019
mfscripts yetishareMFScripts YetiShare 3.5.2 through 4.5.3 does not set the SameSite flag on session cookies,...CVE-2019-197378.8 HighDecember 30, 2019
mfscripts yetishareMFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies,...CVE-2019-197366.1 MediumDecember 30, 2019
mfscripts yetishareclass.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating...CVE-2019-197359.1 CriticalDecember 30, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open