2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-1866 | LOW | 3.7 | 0.3% | Apr 13, 2020 | Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker t... |
| CVE-2019-13916 | HIGH | 8.8 | 1.2% | Apr 13, 2020 | An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low En... |
| CVE-2019-7305 | CRITICAL | 9.8 | 1.8% | Apr 10, 2020 | Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible ... |
| CVE-2019-18376 | MEDIUM | 5.9 | 0.7% | Apr 10, 2020 | A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) u... |
| CVE-2019-18375 | MEDIUM | 6.5 | 1.2% | Apr 10, 2020 | The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with ac... |
| CVE-2019-20637 | HIGH | 7.5 | 1.7% | Apr 8, 2020 | An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does... |
| CVE-2019-4746 | MEDIUM | 5.4 | 0.7% | Apr 8, 2020 | IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability a... |
| CVE-2019-4740 | MEDIUM | 5.4 | 0.7% | Apr 8, 2020 | IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability a... |
| CVE-2019-4737 | MEDIUM | 5.4 | 0.7% | Apr 8, 2020 | IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability a... |
| CVE-2019-4603 | MEDIUM | 4.3 | 0.7% | Apr 8, 2020 | IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST ... |
| CVE-2019-4602 | MEDIUM | 5.4 | 0.7% | Apr 8, 2020 | IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users... |
| CVE-2019-4601 | MEDIUM | 4.3 | 1.0% | Apr 8, 2020 | IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from... |
| CVE-2019-20636 | MEDIUM | 6.7 | 0.4% | Apr 8, 2020 | In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demons... |
| CVE-2019-15789 | HIGH | 7.8 | 0.5% | Apr 8, 2020 | Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to th... |
| CVE-2019-17657 | HIGH | 7.5 | 2.4% | Apr 7, 2020 | An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer ... |
| CVE-2019-13559 | HIGH | 7.8 | 0.3% | Apr 7, 2020 | GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the cont... |
| CVE-2019-13554 | HIGH | 8.8 | 1.0% | Apr 7, 2020 | GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using g... |
| CVE-2019-4393 | CRITICAL | 9.8 | 1.0% | Apr 7, 2020 | HCL AppScan Standard is vulnerable to excessive authorization attempts |
| CVE-2019-4391 | HIGH | 8.2 | 1.2% | Apr 7, 2020 | HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data |
| CVE-2019-19699 | HIGH | 7.2 | 27.5% | Apr 6, 2020 | There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers mi... |
| CVE-2019-17231 | MEDIUM | 6.1 | 1.2% | Apr 3, 2020 | includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues. |
| CVE-2019-17230 | MEDIUM | 5.3 | 2.1% | Apr 3, 2020 | includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. |
| CVE-2019-18905 | MEDIUM | 5.9 | 0.7% | Apr 3, 2020 | A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Lin... |
| CVE-2019-18904 | HIGH | 7.5 | 1.5% | Apr 3, 2020 | A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, S... |
| CVE-2019-19914 | — | — | — | Apr 3, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now