2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-18641 | CRITICAL | 9.8 | 3.3% | Mar 20, 2020 | Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller. |
| CVE-2019-16528 | HIGH | 7.5 | 1.3% | Mar 20, 2020 | An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attacker... |
| CVE-2019-15522 | CRITICAL | 9.8 | 1.9% | Mar 20, 2020 | An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a ... |
| CVE-2019-13463 | MEDIUM | 6.1 | 1.1% | Mar 20, 2020 | An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress all... |
| CVE-2019-13389 | MEDIUM | 6.1 | 0.9% | Mar 20, 2020 | RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection heade... |
| CVE-2019-12498 | CRITICAL | 9.8 | 2.0% | Mar 20, 2020 | The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api... |
| CVE-2019-19324 | HIGH | 7.5 | 1.0% | Mar 20, 2020 | Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted a... |
| CVE-2019-19148 | CRITICAL | 9.8 | 7.7% | Mar 20, 2020 | Tellabs Optical Line Terminal (OLT) 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tell... |
| CVE-2019-16258 | MEDIUM | 6.8 | 0.3% | Mar 20, 2020 | The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by ma... |
| CVE-2019-15665 | HIGH | 7.2 | 2.6% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to valida... |
| CVE-2019-15664 | LOW | 2.7 | 0.9% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to valida... |
| CVE-2019-15663 | LOW | 2.7 | 0.9% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to valida... |
| CVE-2019-15662 | LOW | 2.7 | 0.9% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to valida... |
| CVE-2019-15075 | HIGH | 7.5 | 0.4% | Mar 20, 2020 | An issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config/config.php does not have ... |
| CVE-2019-15661 | HIGH | 7.2 | 2.4% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to valida... |
| CVE-2019-14855 | HIGH | 7.5 | 1.1% | Mar 20, 2020 | A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An att... |
| CVE-2019-19345 | HIGH | 7.8 | 0.3% | Mar 20, 2020 | A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification v... |
| CVE-2019-10221 | MEDIUM | 6.1 | 1.3% | Mar 20, 2020 | A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from t... |
| CVE-2019-10179 | MEDIUM | 6.1 | 0.9% | Mar 20, 2020 | A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not ... |
| CVE-2019-19487 | HIGH | 8.8 | 5.3% | Mar 20, 2020 | Command Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to achieve command injection ... |
| CVE-2019-19486 | MEDIUM | 6.5 | 1.7% | Mar 20, 2020 | Local File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to traverse paths via a pl... |
| CVE-2019-19484 | MEDIUM | 6.1 | 0.9% | Mar 20, 2020 | Open redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker to craft a payload and e... |
| CVE-2019-19029 | HIGH | 7.2 | 2.1% | Mar 20, 2020 | Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Har... |
| CVE-2019-19026 | MEDIUM | 4.9 | 1.4% | Mar 20, 2020 | Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware ... |
| CVE-2019-19025 | HIGH | 8.8 | 1.0% | Mar 20, 2020 | Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry fo... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now