CVE-2019-19463

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published
Nov 30, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-194645.3The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics.CVE-2019-194666.1SCEditor 2.1.3 allows XSS.CVE-2019-194687.8Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, asCVE-2019-194698.8In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injectiCVE-2019-19478.6A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unaCVE-2019-194707.8Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attackeCVE-2019-194758.8An issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated PostgreSQL which is built-in in Applications MaCVE-2019-194795.5An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation duriCVE-2019-19485.9A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorized read access to senCVE-2019-194804.6An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in CVE-2019-194814.6An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certiCVE-2019-194846.1Open redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker to craft a payload and execute unintended be
CVE-2019-19463: Medium severity, CVSS 5.3 | Vulnix