2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20648 | LOW | 3.5 | 0.4% | Apr 15, 2020 | NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings. |
| CVE-2019-20647 | MEDIUM | 5.7 | 0.5% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service. |
| CVE-2019-20646 | CRITICAL | 9.8 | 1.3% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. |
| CVE-2019-20645 | MEDIUM | 4.8 | 0.5% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. |
| CVE-2019-20644 | MEDIUM | 4.8 | 0.5% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. |
| CVE-2019-20643 | HIGH | 7.5 | 0.8% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information. |
| CVE-2019-20642 | HIGH | 8 | 0.5% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass. |
| CVE-2019-20641 | HIGH | 8.8 | 0.8% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. |
| CVE-2019-20640 | HIGH | 8.8 | 0.6% | Apr 15, 2020 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600... |
| CVE-2019-20639 | MEDIUM | 4.8 | 0.6% | Apr 15, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50... |
| CVE-2019-20638 | MEDIUM | 6.5 | 0.9% | Apr 15, 2020 | NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials. |
| CVE-2019-19390 | MEDIUM | 5.4 | 0.5% | Apr 15, 2020 | The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unf... |
| CVE-2019-4654 | MEDIUM | 4.8 | 0.4% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attack... |
| CVE-2019-4594 | MEDIUM | 5.9 | 0.8% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure t... |
| CVE-2019-4593 | MEDIUM | 4.3 | 0.8% | Apr 15, 2020 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in f... |
| CVE-2019-2880 | HIGH | 8.8 | 1.5% | Apr 15, 2020 | Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications (component: Security... |
| CVE-2019-20767 | HIGH | 7.2 | 1.1% | Apr 15, 2020 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor... |
| CVE-2019-19500 | MEDIUM | 5.4 | 0.8% | Apr 15, 2020 | Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstra... |
| CVE-2019-19301 | HIGH | 7.5 | 1.3% | Apr 14, 2020 | A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X2... |
| CVE-2019-19300 | HIGH | 7.5 | 1.5% | Apr 14, 2020 | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation... |
| CVE-2019-10939 | CRITICAL | 9.8 | 1.1% | Apr 14, 2020 | A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE Advanced (... |
| CVE-2019-14326 | HIGH | 7.8 | 1.3% | Apr 14, 2020 | An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh (ports 22 and 23) ... |
| CVE-2019-18822 | HIGH | 8.8 | 1.4% | Apr 14, 2020 | A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e., the account under which... |
| CVE-2019-16879 | CRITICAL | 9.8 | 1.4% | Apr 14, 2020 | The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentica... |
| CVE-2019-11480 | HIGH | 8.1 | 0.5% | Apr 14, 2020 | The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options whe... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now