Archive
18 December 2019
Vulnerabilities first published on this day (UTC), newest first.
41 results · Clear filters · Feed
-
Critical 9.8
Django Potential account hijack via password reset form
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a pa…
-
Unscored —CVE-2019-8820 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…
-
Unscored —CVE-2019-8791 Public exploit
An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fi…
-
Unscored —CVE-2019-8805 Public exploit
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the pr…
-
Unscored —CVE-2019-8765 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Pro…
-
Unscored —CVE-2019-8781 Public exploit
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. An…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —CVE-2019-8690 Public exploit
A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This …
-
Unscored —CVE-2019-8717 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvO…
-
Unscored —CVE-2019-8671 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 1…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A re…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
An out-of-bounds read was addressed with improved input validation.
-
Unscored —CVE-2019-8649 Public exploit
A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state managemen…
-
Unscored —CVE-2019-8663 Public exploit
This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6. A remote attacker…
-
Unscored —CVE-2019-8662 Public exploit
This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchO…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watch…
-
Unscored —CVE-2019-8622 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8611 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8624 Public exploit
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 5.3. A remote attack…
-
Unscored —CVE-2019-8623 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watch…
-
Unscored —
A race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A mal…
-
Unscored —CVE-2019-8591 Public exploit
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14…
-
Unscored —CVE-2019-8561 Public exploit
A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious applicat…
-
Unscored —CVE-2019-8601 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…
KEV Jun 27, 2022 -
Unscored —CVE-2019-8540 Public exploit
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojav…
-
Unscored —CVE-2019-8558 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
High 7.8
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave…
KEV May 23, 2022 -
Unscored —CVE-2019-8513 Public exploit
This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to…
-
Unscored —CVE-2019-8514 Public exploit
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS…
-
High 8.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…
KEV May 4, 2022 -
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —CVE-2019-6207 Public exploit
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input…
-
Unscored —
In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous …
-
Critical 10.0
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated us…
KEV Nov 3, 2021 -
Unscored —
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.