2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2019-25279HIGH7.5FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to acce...
CVE-2019-25231HIGH8.5devolo dLAN Cockpit 4.3.1 contains an unquoted service path vulnerability in the 'DevoloNetworkService' that allows loca...
CVE-2019-25258HIGH7.5LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers t...
CVE-2019-25257HIGH8.7LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to...
CVE-2019-25256HIGH7.1VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows atta...
CVE-2019-25255HIGH8.7VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows at...
CVE-2019-25254HIGH8.8KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administr...
CVE-2019-25253HIGH7.5KYOCERA Net Admin 3.4.0906 contains an XML External Entity (XXE) injection vulnerability in the Multi-Set Template Edito...
CVE-2019-25248HIGH8.7Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video st...
CVE-2019-25246HIGH8.8Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to ...
CVE-2019-25245HIGH8.8Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify e...
CVE-2019-25243HIGH8.8FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php sc...
CVE-2019-25239HIGH8.7V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers...
CVE-2019-25229HIGH8.8An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions t...
CVE-2019-25227HIGH8.7Tellion HN-2204AP routers contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/system_confi...
CVE-2019-25226HIGH8.7Dongyoung Media DM-AP240T/W wireless access points contain an unauthenticated configuration disclosure vulnerability in ...
CVE-2019-16536HIGH8.8Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.
CVE-2019-17659HIGH8.1A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attack...
CVE-2019-15690HIGH8.8LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() funct...
CVE-2019-2483HIGH8.2Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th...
CVE-2019-25220HIGH7.5Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-diffic...
CVE-2019-20460HIGH8.8An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tok...
CVE-2019-20459HIGH8.4An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all value...
CVE-2019-20458HIGH8.8An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes (and functions...
CVE-2019-25219HIGH7.5Asio C++ Library before 1.13.0 lacks a fallback error code in the case of SSL_ERROR_SYSCALL with no associated error inf...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now