2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15850 | HIGH | 8.8 | 15.6% | Oct 17, 2019 | eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated... |
| CVE-2019-15849 | HIGH | 7.3 | 0.8% | Oct 17, 2019 | eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs and send them to the vi... |
| CVE-2019-14423 | HIGH | 8.8 | 19.9% | Oct 17, 2019 | A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.... |
| CVE-2019-17676 | HIGH | 8.8 | 0.6% | Oct 17, 2019 | app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup... |
| CVE-2019-17675 | HIGH | 8.8 | 2.8% | Oct 17, 2019 | WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, po... |
| CVE-2019-17673 | HIGH | 7.5 | 3.2% | Oct 17, 2019 | WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary... |
| CVE-2019-17666 | HIGH | 8.8 | 3.0% | Oct 17, 2019 | rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-boun... |
| CVE-2019-17665 | HIGH | 7.8 | 0.5% | Oct 16, 2019 | NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory. |
| CVE-2019-17664 | HIGH | 7.8 | 0.4% | Oct 16, 2019 | NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java pro... |
| CVE-2019-17436 | HIGH | 7.1 | 0.3% | Oct 16, 2019 | A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlie... |
| CVE-2019-16682 | HIGH | 7.3 | 0.8% | Oct 16, 2019 | The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susce... |
| CVE-2019-15262 | HIGH | 7.5 | 1.4% | Oct 16, 2019 | A vulnerability in the Secure Shell (SSH) session management for Cisco Wireless LAN Controller (WLC) Software could allo... |
| CVE-2019-15261 | HIGH | 8.6 | 1.4% | Oct 16, 2019 | A vulnerability in the Point-to-Point Tunneling Protocol (PPTP) VPN packet processing functionality in Cisco Aironet Acc... |
| CVE-2019-15252 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15251 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15250 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15249 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15248 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15247 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15246 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15245 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15244 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15243 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15242 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
| CVE-2019-15241 | HIGH | 8 | 0.6% | Oct 16, 2019 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now