2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-3977 | HIGH | 7.5 | 1.1% | Oct 29, 2019 | RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download... |
| CVE-2019-3976 | HIGH | 8.8 | 1.7% | Oct 29, 2019 | RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerabi... |
| CVE-2019-18608 | HIGH | 7.5 | 1.0% | Oct 29, 2019 | Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritte... |
| CVE-2019-18602 | HIGH | 7.5 | 1.5% | Oct 29, 2019 | OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized s... |
| CVE-2019-18601 | HIGH | 7.5 | 1.4% | Oct 29, 2019 | OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote ... |
| CVE-2019-16647 | HIGH | 7.2 | 2.0% | Oct 29, 2019 | Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows. |
| CVE-2019-15681 | HIGH | 7.5 | 3.3% | Oct 29, 2019 | LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which... |
| CVE-2019-15680 | HIGH | 7.5 | 2.8% | Oct 29, 2019 | TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System... |
| CVE-2019-10210 | HIGH | 7 | 0.4% | Oct 29, 2019 | Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing pas... |
| CVE-2019-10208 | HIGH | 8.8 | 2.2% | Oct 29, 2019 | A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before ... |
| CVE-2019-0210 | HIGH | 7.5 | 6.8% | Oct 29, 2019 | In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when f... |
| CVE-2019-0205 | HIGH | 7.5 | 9.1% | Oct 29, 2019 | In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with... |
| CVE-2019-4546 | HIGH | 8.8 | 0.7% | Oct 29, 2019 | After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges th... |
| CVE-2019-4339 | HIGH | 7.5 | 1.0% | Oct 29, 2019 | IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could a... |
| CVE-2019-4314 | HIGH | 7.5 | 1.0% | Oct 29, 2019 | IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource tha... |
| CVE-2019-18188 | HIGH | 7.5 | 4.7% | Oct 28, 2019 | Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from... |
| CVE-2019-18187 | HIGH | 7.5 | 25.1% | Oct 28, 2019 | Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vul... |
| CVE-2019-3636 | HIGH | 7.8 | 0.2% | Oct 28, 2019 | A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed ... |
| CVE-2019-18195 | HIGH | 8.8 | 1.8% | Oct 28, 2019 | An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation. |
| CVE-2019-14927 | HIGH | 7.5 | 41.8% | Oct 28, 2019 | An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3... |
| CVE-2019-16663 | HIGH | 8.8 | 84.7% | Oct 28, 2019 | An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to s... |
| CVE-2019-5508 | HIGH | 7.5 | 1.3% | Oct 25, 2019 | Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping ... |
| CVE-2019-17145 | HIGH | 8.8 | 5.5% | Oct 25, 2019 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0... |
| CVE-2019-17144 | HIGH | 8.8 | 5.5% | Oct 25, 2019 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0... |
| CVE-2019-17142 | HIGH | 8.8 | 6.3% | Oct 25, 2019 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now