2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15966 | HIGH | 7.7 | 1.2% | Nov 5, 2019 | A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote... |
| CVE-2019-12625 | HIGH | 7.5 | 2.2% | Nov 5, 2019 | ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause... |
| CVE-2019-18631 | HIGH | 7.8 | 1.2% | Nov 5, 2019 | The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5... |
| CVE-2019-17062 | HIGH | 8.8 | 1.2% | Nov 5, 2019 | An issue was discovered in OXID eShop 6.x before 6.0.6 and 6.1.x before 6.1.5, OXID eShop Enterprise Edition Version 5.2... |
| CVE-2019-17598 | HIGH | 7.5 | 0.7% | Nov 5, 2019 | An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an auth... |
| CVE-2019-17221 | HIGH | 7.5 | 3.4% | Nov 5, 2019 | PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI... |
| CVE-2019-3685 | HIGH | 7.7 | 0.7% | Nov 5, 2019 | Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client bi... |
| CVE-2019-18178 | HIGH | 7.5 | 0.9% | Nov 4, 2019 | Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file... |
| CVE-2019-17210 | HIGH | 7.5 | 1.0% | Nov 4, 2019 | A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString()... |
| CVE-2019-13496 | HIGH | 8.1 | 0.8% | Nov 4, 2019 | One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the... |
| CVE-2019-18684 | HIGH | 7 | 0.3% | Nov 4, 2019 | Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo pr... |
| CVE-2019-18683 | HIGH | 7 | 1.0% | Nov 4, 2019 | An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privile... |
| CVE-2019-18680 | HIGH | 7.5 | 3.6% | Nov 4, 2019 | An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_so... |
| CVE-2019-0350 | HIGH | 7.5 | 1.1% | Nov 4, 2019 | SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which cras... |
| CVE-2019-18665 | HIGH | 7.5 | 14.9% | Nov 2, 2019 | The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion. |
| CVE-2019-18661 | HIGH | 7.5 | 1.5% | Nov 2, 2019 | Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 ... |
| CVE-2019-6470 | HIGH | 7.5 | 8.8% | Nov 1, 2019 | There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 m... |
| CVE-2019-15588 | HIGH | 7.2 | 5.6% | Nov 1, 2019 | There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attac... |
| CVE-2019-18230 | HIGH | 7.5 | 1.1% | Oct 31, 2019 | Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product ... |
| CVE-2019-18228 | HIGH | 7.5 | 2.1% | Oct 31, 2019 | Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a... |
| CVE-2019-18227 | HIGH | 7.5 | 3.1% | Oct 31, 2019 | Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive dat... |
| CVE-2019-16906 | HIGH | 7.5 | 2.1% | Oct 31, 2019 | An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. By using plugins/servl... |
| CVE-2019-16675 | HIGH | 7.8 | 3.3% | Oct 31, 2019 | An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86.... |
| CVE-2019-5043 | HIGH | 7.5 | 0.7% | Oct 31, 2019 | An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A ... |
| CVE-2019-5030 | HIGH | 8.8 | 2.9% | Oct 31, 2019 | A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Docum... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now