2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-6692 | HIGH | 7.8 | 0.5% | Oct 24, 2019 | A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker t... |
| CVE-2019-18409 | HIGH | 7.8 | 0.3% | Oct 24, 2019 | The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files... |
| CVE-2019-18408 | HIGH | 7.5 | 4.0% | Oct 24, 2019 | archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free i... |
| CVE-2019-15703 | HIGH | 7.5 | 1.0% | Oct 24, 2019 | An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable ha... |
| CVE-2019-18213 | HIGH | 8.8 | 2.0% | Oct 23, 2019 | XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 fo... |
| CVE-2019-8238 | HIGH | 7.5 | 4.7% | Oct 23, 2019 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier; 2019.010.20099 and earlier versions; 2017.011.30140 and ea... |
| CVE-2019-18385 | HIGH | 7.5 | 1.9% | Oct 23, 2019 | An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the... |
| CVE-2019-18383 | HIGH | 7.5 | 1.6% | Oct 23, 2019 | An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramaster_TN... |
| CVE-2019-18382 | HIGH | 7.5 | 1.1% | Oct 23, 2019 | An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456.... |
| CVE-2019-18371 | HIGH | 7.5 | 55.4% | Oct 23, 2019 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerabilit... |
| CVE-2019-17093 | HIGH | 7.8 | 0.6% | Oct 23, 2019 | An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability all... |
| CVE-2019-11283 | HIGH | 8.8 | 1.5% | Oct 23, 2019 | Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote use... |
| CVE-2019-18280 | HIGH | 8.8 | 0.5% | Oct 23, 2019 | Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF... |
| CVE-2019-18278 | HIGH | 7.8 | 0.4% | Oct 23, 2019 | When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow st... |
| CVE-2019-18277 | HIGH | 7.5 | 10.0% | Oct 23, 2019 | A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chu... |
| CVE-2019-18220 | HIGH | 8.8 | 1.1% | Oct 23, 2019 | Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to valid... |
| CVE-2019-10476 | HIGH | 7.8 | 0.3% | Oct 23, 2019 | Jenkins Zulip Plugin 1.1.0 and earlier stored credentials unencrypted in its global configuration file on the Jenkins ma... |
| CVE-2019-10471 | HIGH | 8.8 | 0.7% | Oct 23, 2019 | A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-s... |
| CVE-2019-10468 | HIGH | 8.8 | 0.7% | Oct 23, 2019 | A cross-site request forgery vulnerability in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers to con... |
| CVE-2019-10466 | HIGH | 8.1 | 1.0% | Oct 23, 2019 | An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to... |
| CVE-2019-10464 | HIGH | 8.8 | 0.8% | Oct 23, 2019 | A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-... |
| CVE-2019-10462 | HIGH | 8.1 | 0.7% | Oct 23, 2019 | A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed ... |
| CVE-2019-10461 | HIGH | 7.8 | 0.3% | Oct 23, 2019 | Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configura... |
| CVE-2019-10460 | HIGH | 7.8 | 0.3% | Oct 23, 2019 | Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration fil... |
| CVE-2019-12290 | HIGH | 7.5 | 3.1% | Oct 22, 2019 | GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now