VIR Vulnerability Intelligence Relay

CVEs from 2019

3,413 normalized CVEs published or assigned in this year.

Total
3,413
critical
critical 232
high
high 332
medium
medium 301
low
low 72
% Critical
6.8%
% with KEV
3.5%
% with exploit
3.5%

Top vendors

Top products

  • u-boot 20
  • nsauditor 1
  • crypto 1

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2019-2819 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2815 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2785 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2534 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2774 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2535 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2617 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2589 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2502 high — 8.0 7y ago Important: mysql:8.0 security update rockylinux
CVE-2019-2486 high — 8.0 7y ago Important: mysql:8.0 security update rockylinux
CVE-2019-2495 high — 8.0 7y ago Important: mysql:8.0 security update rockylinux
CVE-2019-2607 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2636 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2434 high — 8.0 7y ago Important: mysql:8.0 security update rockylinux
CVE-2019-2800 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2494 high — 8.0 7y ago Important: mysql:8.0 security update rockylinux
CVE-2019-2950 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2834 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2830 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2812 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2826 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2634 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2691 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2948 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-3003 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2606 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2814 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2969 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2808 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2503 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinux
CVE-2019-2802 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2585 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2801 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2584 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2596 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2593 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2530 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinux
CVE-2019-2681 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2624 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2695 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2694 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2631 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2683 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2630 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2420 high — 8.0 7y ago Important: mysql:8.0 security update rockylinux
CVE-2019-2536 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2620 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2778 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2687 high — 8.0 7y ago Important: mysql:8.0 security update suserockylinuxalmalinux
CVE-2019-2789 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2810 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2879 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2798 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2738 high — 8.0 7y ago Important: mysql:8.0 security update rockylinuxalmalinux
CVE-2019-2436 high — 8.0 7y ago Important: mysql:8.0 security update rockylinux
CVE-2019-12384 high — 8.0 7y ago Deserialization of Untrusted Data in FasterXML jackson-databind debianrockylinuxjava
CVE-2019-12781 high — 8.0 7y ago An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT set… archsusedebianpython
CVE-2019-9636 high — 8.0 7y ago Important: python27:2.7 security update archsuserockylinuxdebian
CVE-2019-5736 high — 8.0 7y ago Important: container-tools:rhel8 security and bug fix update archsuserockylinuxdebian
CVE-2019-10906 high — 8.0 7y ago In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape. susedebianrockylinuxpython
CVE-2019-8324 high — 8.0 7y ago Important: ruby:2.5 security update susedebianrockylinuxruby
CVE-2019-13106 high 7.8 7.8 7y ago Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. susedebian
CVE-2019-13104 high 7.8 7.8 7y ago In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. susedebian
CVE-2019-13103 high 7.1 7.1 7y ago A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwr… susedebian
CVE-2019-8506 low — 4.0 4y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebian
CVE-2019-1543 low — 2.5 — ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a vari… archsusedebian
CVE-2019-7653 low — 2.5 — The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in th… archdebian
CVE-2019-7317 low — 2.5 — png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. archsusedebian
CVE-2019-16167 low — 2.5 — sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c. suserockylinuxdebian
CVE-2019-5882 low — 2.5 — Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer. archdebian
CVE-2019-7310 low — 2.5 — In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash… archsusedebian
CVE-2019-20838 low — 2.5 5y ago Low: pcre security update suserockylinuxdebian
CVE-2019-17402 low — 2.5 5y ago Low: exiv2 security, bug fix, and enhancement update susedebianrockylinux
CVE-2019-2708 low — 2.5 5y ago Low: libdb security update suserockylinux
CVE-2019-14494 low — 2.5 6y ago Low: poppler security update susedebian
CVE-2019-15165 low — 2.5 6y ago Low: libpcap security, bug fix, and enhancement update susedebian
CVE-2019-1010305 low — 2.5 6y ago Low: libmspack security and bug fix update susedebianrockylinux
CVE-2019-13045 low — 2.5 6y ago Low: irssi security update archdebianrockylinux
CVE-2019-11498 low — 2.5 6y ago Low: wavpack security update suserockylinuxdebian
CVE-2019-1010317 low — 2.5 6y ago Low: wavpack security update rockylinuxdebian
CVE-2019-1010319 low — 2.5 6y ago Low: wavpack security update suserockylinuxdebian
CVE-2019-1010315 low — 2.5 6y ago Low: wavpack security update suserockylinuxdebian
CVE-2019-19118 low — 2.5 7y ago Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing. A Django model admin displaying inline related models, where the user has view-only permissions to a parent model but ed… archdebianpython
CVE-2019-8563 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update suserockylinuxdebian
CVE-2019-6251 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update archrockylinuxdebian
CVE-2019-8611 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux
CVE-2019-8610 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux
CVE-2019-8615 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux
CVE-2019-11459 low — 2.5 7y ago The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to u… debiansuserockylinux
CVE-2019-8619 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux
CVE-2019-8587 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux
CVE-2019-8671 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update suserockylinuxdebianalmalinux
CVE-2019-8523 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update suserockylinuxdebian
CVE-2019-8726 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update suserockylinuxdebianalmalinux
CVE-2019-8681 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update suserockylinuxdebianalmalinux
CVE-2019-8594 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux
CVE-2019-8622 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux
CVE-2019-8571 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebian
CVE-2019-8586 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux
CVE-2019-8597 low — 2.5 7y ago Low: GNOME security, bug fix, and enhancement update rockylinuxdebianalmalinux