2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-2932 | HIGH | 7.7 | 1.3% | Oct 16, 2019 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). Supported... |
| CVE-2019-2907 | HIGH | 7.2 | 1.2% | Oct 16, 2019 | Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware (component: SOAP with Attachments API for J... |
| CVE-2019-2906 | HIGH | 8.2 | 1.7% | Oct 16, 2019 | Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: Mobile Servic... |
| CVE-2019-2905 | HIGH | 8.6 | 2.0% | Oct 16, 2019 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ins... |
| CVE-2019-2903 | HIGH | 7.3 | 1.3% | Oct 16, 2019 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). T... |
| CVE-2019-2902 | HIGH | 7.3 | 1.3% | Oct 16, 2019 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). T... |
| CVE-2019-2901 | HIGH | 7.3 | 1.3% | Oct 16, 2019 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). T... |
| CVE-2019-2900 | HIGH | 7.5 | 1.7% | Oct 16, 2019 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ana... |
| CVE-2019-2895 | HIGH | 7.5 | 1.2% | Oct 16, 2019 | Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Dep... |
| CVE-2019-2891 | HIGH | 8.1 | 1.6% | Oct 16, 2019 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions... |
| CVE-2019-2890 | HIGH | 7.2 | 37.6% | Oct 16, 2019 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ver... |
| CVE-2019-15893 | HIGH | 7.2 | 2.1% | Oct 16, 2019 | Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution. |
| CVE-2019-10453 | HIGH | 7.8 | 0.3% | Oct 16, 2019 | Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they ... |
| CVE-2019-10449 | HIGH | 8.8 | 0.7% | Oct 16, 2019 | Jenkins Fortify on Demand Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they... |
| CVE-2019-10448 | HIGH | 8.8 | 0.9% | Oct 16, 2019 | Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they... |
| CVE-2019-10446 | HIGH | 8.2 | 1.0% | Oct 16, 2019 | Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins ma... |
| CVE-2019-10443 | HIGH | 8.8 | 1.6% | Oct 16, 2019 | Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master w... |
| CVE-2019-10440 | HIGH | 8.8 | 1.5% | Oct 16, 2019 | Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job conf... |
| CVE-2019-10437 | HIGH | 8.8 | 0.8% | Oct 16, 2019 | A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed atta... |
| CVE-2019-4031 | HIGH | 7.8 | 0.3% | Oct 16, 2019 | IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to writ... |
| CVE-2019-17624 | HIGH | 7.8 | 3.7% | Oct 16, 2019 | "" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sendin... |
| CVE-2019-17612 | HIGH | 7.2 | 1.0% | Oct 15, 2019 | An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the _list method in the Common/Controller... |
| CVE-2019-14832 | HIGH | 7.5 | 0.5% | Oct 15, 2019 | A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user w... |
| CVE-2019-12944 | HIGH | 7.5 | 1.0% | Oct 15, 2019 | Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situations where the network connection is u... |
| CVE-2019-17593 | HIGH | 8.8 | 0.5% | Oct 14, 2019 | JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now