2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2019-16447HIGH7.8Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. Successful exploitation could lead ...
CVE-2019-25781HIGH7.5Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows r...
CVE-2019-25779HIGH7.5WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitra...
CVE-2019-25778HIGH8.2SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate da...
CVE-2019-25777HIGH7.3YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead...
CVE-2019-25776HIGH7.5Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrar...
CVE-2019-25766HIGH7.5Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during certain G...
CVE-2019-25765HIGH7.5ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attack...
CVE-2019-25764HIGH7.3**UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a loca...
CVE-2019-25762HIGH7.5Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attac...
CVE-2019-25761HIGH7.1Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute a...
CVE-2019-25759HIGH7.1Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arb...
CVE-2019-25758HIGH8.8Joomla! Component vBizz 1.0.7 contains an unrestricted file upload vulnerability that allows authenticated attackers to ...
CVE-2019-25757HIGH7.1Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary ...
CVE-2019-25756HIGH8.2Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execut...
CVE-2019-25755HIGH8.2Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute...
CVE-2019-25754HIGH8.2Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to exec...
CVE-2019-25753HIGH8.2Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute ar...
CVE-2019-25752HIGH8.2Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attacker...
CVE-2019-25751HIGH8.2Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attacker...
CVE-2019-25750HIGH8.2Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated at...
CVE-2019-25749HIGH7.1Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbit...
CVE-2019-25748HIGH8.2Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute ...
CVE-2019-25747HIGH7.8Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attack...
CVE-2019-25746HIGH7.1WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attacker...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now