CVE-2019-12193

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Related CVEs from 2019

CVE-2019-121954.8TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and goiCVE-2019-121969.8A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers toCVE-2019-121987.5In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.CVE-2019-12204.3A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific UCVE-2019-122036.3SilverStripe through 4.3.3 allows session fixation in the "change password" form.CVE-2019-122049.8In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.CVE-2019-122056.1SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS.CVE-2019-122069.8njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c.CVE-2019-122079.8njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c.CVE-2019-122089.8njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c.CVE-2019-122097.5Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabCVE-2019-12217.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip
CVE-2019-12193: Critical severity, CVSS 9.8 | Vulnix