CVE-2019-2924
- EPSS 1.33%
- Published 16.10.2019 18:15:28
- Last modified 21.11.2024 04:41:48
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.6.45 and prior and 5.7.27 and prior. Easily exploitable vulnerability allows unauthenticated attacker with...
CVE-2019-2910
- EPSS 0.31%
- Published 16.10.2019 18:15:27
- Last modified 21.11.2024 04:41:47
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.6.45 and prior and 5.7.27 and prior. Difficult to exploit vulnerability allows unauthenticated attacker wi...
- EPSS 0.19%
- Published 16.10.2019 18:15:27
- Last modified 21.11.2024 04:41:47
Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attac...
CVE-2019-17359
- EPSS 7.63%
- Published 08.10.2019 14:15:10
- Last modified 12.05.2025 17:37:16
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
CVE-2019-17267
- EPSS 1.36%
- Published 07.10.2019 00:15:10
- Last modified 21.11.2024 04:31:59
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
CVE-2019-10212
- EPSS 0.29%
- Published 02.10.2019 19:15:11
- Last modified 21.11.2024 04:18:39
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.
CVE-2019-16942
- EPSS 0.44%
- Published 01.10.2019 17:15:10
- Last modified 21.11.2024 04:31:23
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1....
CVE-2019-16943
- EPSS 1.84%
- Published 01.10.2019 17:15:10
- Last modified 21.11.2024 04:31:23
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) ja...
CVE-2019-16168
- EPSS 0.84%
- Published 09.09.2019 17:15:13
- Last modified 21.11.2024 04:30:11
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
CVE-2019-15223
- EPSS 0.06%
- Published 19.08.2019 22:15:12
- Last modified 21.11.2024 04:28:14
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.