2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19348 | HIGH | 7 | 0.3% | Apr 2, 2020 | An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting ... |
| CVE-2019-19346 | HIGH | 7 | 0.3% | Apr 2, 2020 | An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecti... |
| CVE-2019-19097 | HIGH | 7.5 | 0.7% | Apr 2, 2020 | ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such ... |
| CVE-2019-19096 | MEDIUM | 6.1 | 0.3% | Apr 2, 2020 | The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attac... |
| CVE-2019-19095 | MEDIUM | 5.4 | 0.6% | Apr 2, 2020 | Lack of adequate input/output validation for ABB eSOMS versions 4.0 to 6.0.2 might allow an attacker to attack such as s... |
| CVE-2019-19094 | HIGH | 7.6 | 0.9% | Apr 2, 2020 | Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks ag... |
| CVE-2019-19093 | MEDIUM | 6.5 | 0.8% | Apr 2, 2020 | eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security ... |
| CVE-2019-19092 | LOW | 3.5 | 0.8% | Apr 2, 2020 | ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC). Alterations to Viewstat... |
| CVE-2019-19091 | MEDIUM | 4.3 | 0.8% | Apr 2, 2020 | For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensitive information about the application. ... |
| CVE-2019-19090 | LOW | 3.5 | 0.5% | Apr 2, 2020 | For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections mig... |
| CVE-2019-19089 | MEDIUM | 6.1 | 1.0% | Apr 2, 2020 | For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially caus... |
| CVE-2019-19003 | MEDIUM | 6.1 | 0.8% | Apr 2, 2020 | For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set. This can allow Javascript to access the cookie conten... |
| CVE-2019-19002 | MEDIUM | 5.4 | 0.8% | Apr 2, 2020 | For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web serv... |
| CVE-2019-19001 | MEDIUM | 6.5 | 1.5% | Apr 2, 2020 | For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can potentially... |
| CVE-2019-19000 | MEDIUM | 6.5 | 1.1% | Apr 2, 2020 | For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the app... |
| CVE-2019-14868 | HIGH | 7.8 | 1.4% | Apr 2, 2020 | In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use t... |
| CVE-2019-20635 | MEDIUM | 6.1 | 0.9% | Apr 2, 2020 | codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class... |
| CVE-2019-7017 | — | — | — | Apr 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-7016 | — | — | — | Apr 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-7015 | — | — | — | Apr 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-7014 | — | — | — | Apr 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-7013 | — | — | — | Apr 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-7012 | — | — | — | Apr 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-7011 | — | — | — | Apr 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-7010 | — | — | — | Apr 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now