CVE-2019-1000 to CVE-2019-1999

83 CVEs with public proof-of-concept exploits.

• CVE-2019-10061 PoCAn authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing…
• CVE-2019-10191 PoCMicrosoft Windows Security Feature Bypass Vulnerability
• CVE-2019-10404 PoCsWindows NTLM Tampering Vulnerability
• CVE-2019-10642 PoCsKEVWindows Elevation of Privilege Vulnerability
• CVE-2019-10682 PoCsKEVA remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka…
• CVE-2019-10691 PoCKEVTask Scheduler Elevation of Privilege Vulnerability
• CVE-2019-10831 PoCA denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of…
• CVE-2019-10891 PoCAn elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To…
• CVE-2019-10962 PoCsAn information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…
• CVE-2019-11081 PoCAn information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote…
• CVE-2019-11171 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11181 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11191 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11201 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11211 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11221 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11231 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11241 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11253 PoCsWindows Kernel Information Disclosure Vulnerability
• CVE-2019-11271 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11281 PoCA remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
• CVE-2019-11291 PoCKEVAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows…
• CVE-2019-11301 PoCKEVAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows…
• CVE-2019-11324 PoCsKEVAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
• CVE-2019-11441 PoCMicrosoft Graphics Remote Code Execution Vulnerability
• CVE-2019-11451 PoCMicrosoft Graphics Remote Code Execution Vulnerability
• CVE-2019-11481 PoCMicrosoft Graphics Component Information Disclosure Vulnerability
• CVE-2019-11491 PoCMicrosoft Graphics Remote Code Execution Vulnerability
• CVE-2019-11502 PoCsMicrosoft Graphics Remote Code Execution Vulnerability
• CVE-2019-11511 PoCMicrosoft Graphics Remote Code Execution Vulnerability
• CVE-2019-11521 PoCMicrosoft Graphics Remote Code Execution Vulnerability
• CVE-2019-11531 PoCMicrosoft Graphics Component Information Disclosure Vulnerability
• CVE-2019-11701 PoCWindows NTFS Elevation of Privilege Vulnerability
• CVE-2019-11841 PoCWindows Elevation of Privilege Vulnerability
• CVE-2019-12152 PoCsKEVAn elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of…
• CVE-2019-12181 PoCOutlook iOS Spoofing Vulnerability
• CVE-2019-12212 PoCsA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
• CVE-2019-12441 PoCAn information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite…
• CVE-2019-12451 PoCAn information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite…
• CVE-2019-12537 PoCsKEVAn elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this…
• CVE-2019-12621 PoCA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web…
• CVE-2019-13151 PoCKEVAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error…
• CVE-2019-13224 PoCsKEVAn elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation…
• CVE-2019-13322 PoCsA cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a…
• CVE-2019-13431 PoCA denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'…
• CVE-2019-13441 PoCAn information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows…
• CVE-2019-13451 PoCAn information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
• CVE-2019-13461 PoCA denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'…
• CVE-2019-13471 PoCA denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'…
• CVE-2019-13511 PoCA tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering…
• CVE-2019-13641 PoCAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
• CVE-2019-13887 PoCsKEVAn elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka…
• CVE-2019-14053 PoCsKEVAn elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object…
• CVE-2019-14221 PoCAn elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka…
• CVE-2019-14292 PoCsKEVA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
• CVE-2019-14588 PoCsKEVAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
• CVE-2019-14763 PoCsAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows…
• CVE-2019-15794 PoCsKEVRemote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal…
• CVE-2019-16193 PoCsCisco Data Center Network Manager Authentication Bypass Vulnerability
• CVE-2019-16202 PoCsCisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability
• CVE-2019-16222 PoCsCisco Data Center Network Manager Information Disclosure Vulnerability
• CVE-2019-16421 PoCCisco Firepower Management Center Cross-Site Scripting Vulnerability
• CVE-2019-16527 PoCsKEVCisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
• CVE-2019-165317 PoCsKEVCisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
• CVE-2019-16637 PoCsCisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
• CVE-2019-16741 PoCCisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability
• CVE-2019-16981 PoCCisco IoT Field Network Director XML External Entity Vulnerability
• CVE-2019-17491 PoCCisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability
• CVE-2019-17591 PoCCisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability
• CVE-2019-18215 PoCsCisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities
• CVE-2019-18811 PoCCisco Industrial Network Director Cross-Site Request Forgery Vulnerability
• CVE-2019-18971 PoCCisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability
• CVE-2019-18982 PoCsCisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability
• CVE-2019-18991 PoCCisco RV110W, RV130W, and RV215W Routers Information Disclosure Vulnerability
• CVE-2019-19121 PoCCisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability
• CVE-2019-19131 PoCCisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities
• CVE-2019-19141 PoCCisco Small Business 220 Series Smart Switches Command Injection Vulnerability
• CVE-2019-19354 PoCsCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default…
• CVE-2019-19364 PoCsCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection…
• CVE-2019-19373 PoCsCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass…
• CVE-2019-19432 PoCsCisco Small Business Series Switches Open Redirect Vulnerability
• CVE-2019-19781 PoCCisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability
• CVE-2019-19991 PoCIn binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation…