2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-5010 | HIGH | 7.5 | 20.7% | Oct 31, 2019 | An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6... |
| CVE-2019-5150 | HIGH | 8.1 | 1.5% | Oct 31, 2019 | An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially ... |
| CVE-2019-18396 | HIGH | 7.2 | 16.2% | Oct 31, 2019 | An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Comm... |
| CVE-2019-15710 | HIGH | 7.2 | 1.9% | Oct 31, 2019 | An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow... |
| CVE-2019-12612 | HIGH | 7.8 | 0.3% | Oct 31, 2019 | An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitra... |
| CVE-2019-3421 | HIGH | 8 | 1.1% | Oct 31, 2019 | The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection v... |
| CVE-2019-18368 | HIGH | 7.3 | 1.0% | Oct 31, 2019 | In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible. |
| CVE-2019-18423 | HIGH | 8.8 | 2.1% | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_... |
| CVE-2019-18422 | HIGH | 8.8 | 1.8% | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privilege... |
| CVE-2019-18421 | HIGH | 7.5 | 1.7% | Oct 31, 2019 | An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging ra... |
| CVE-2019-18635 | HIGH | 7.5 | 2.1% | Oct 30, 2019 | An issue was discovered in Mooltipass Moolticute through v0.42.1 and v0.42.x-testing through v0.42.5-testing. There is a... |
| CVE-2019-17323 | HIGH | 8.8 | 1.6% | Oct 30, 2019 | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of... |
| CVE-2019-18206 | HIGH | 8.8 | 0.5% | Oct 30, 2019 | A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary ... |
| CVE-2019-18204 | HIGH | 8.8 | 1.7% | Oct 30, 2019 | Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php files in order to achieve... |
| CVE-2019-15682 | HIGH | 7.5 | 1.4% | Oct 30, 2019 | RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial... |
| CVE-2019-7620 | HIGH | 7.5 | 1.5% | Oct 30, 2019 | Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthe... |
| CVE-2019-9926 | HIGH | 8.8 | 1.9% | Oct 29, 2019 | An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code throu... |
| CVE-2019-9757 | HIGH | 7.5 | 37.3% | Oct 29, 2019 | An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-... |
| CVE-2019-6851 | HIGH | 7.5 | 29.9% | Oct 29, 2019 | A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium ,... |
| CVE-2019-6850 | HIGH | 7.5 | 1.7% | Oct 29, 2019 | A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, whic... |
| CVE-2019-6849 | HIGH | 7.5 | 1.7% | Oct 29, 2019 | A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, whic... |
| CVE-2019-6848 | HIGH | 8.6 | 33.0% | Oct 29, 2019 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M5... |
| CVE-2019-6845 | HIGH | 7.5 | 1.1% | Oct 29, 2019 | A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon P... |
| CVE-2019-3979 | HIGH | 7.5 | 0.9% | Oct 29, 2019 | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router a... |
| CVE-2019-3978 | HIGH | 7.5 | 10.3% | Oct 29, 2019 | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queri... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now