2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-5186 | HIGH | 7 | 0.8% | Mar 23, 2020 | An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionalit... |
| CVE-2019-5185 | HIGH | 7 | 0.8% | Mar 23, 2020 | An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionalit... |
| CVE-2019-5184 | HIGH | 7.8 | 0.8% | Mar 23, 2020 | An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A spe... |
| CVE-2019-19964 | LOW | 2.7 | 0.9% | Mar 23, 2020 | On NETGEAR GS728TPS devices through 5.3.0.35, a remote attacker having network connectivity to the web-administration pa... |
| CVE-2019-15510 | MEDIUM | 6.1 | 3.2% | Mar 23, 2020 | ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on the user administration... |
| CVE-2019-18936 | HIGH | 7.5 | 1.5% | Mar 21, 2020 | UniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class internal data reaches ... |
| CVE-2019-17185 | HIGH | 7.5 | 2.2% | Mar 21, 2020 | In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. Th... |
| CVE-2019-12767 | CRITICAL | 9.8 | 2.1% | Mar 21, 2020 | An issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can execute arbitrary commands... |
| CVE-2019-11574 | CRITICAL | 9.8 | 1.5% | Mar 20, 2020 | An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php ... |
| CVE-2019-18860 | MEDIUM | 6.1 | 5.5% | Mar 20, 2020 | Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.c... |
| CVE-2019-18641 | CRITICAL | 9.8 | 3.3% | Mar 20, 2020 | Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller. |
| CVE-2019-16528 | HIGH | 7.5 | 1.3% | Mar 20, 2020 | An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attacker... |
| CVE-2019-15522 | CRITICAL | 9.8 | 1.9% | Mar 20, 2020 | An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a ... |
| CVE-2019-13463 | MEDIUM | 6.1 | 1.1% | Mar 20, 2020 | An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress all... |
| CVE-2019-13389 | MEDIUM | 6.1 | 0.9% | Mar 20, 2020 | RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection heade... |
| CVE-2019-12498 | CRITICAL | 9.8 | 2.0% | Mar 20, 2020 | The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api... |
| CVE-2019-19324 | HIGH | 7.5 | 1.0% | Mar 20, 2020 | Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted a... |
| CVE-2019-19148 | CRITICAL | 9.8 | 7.7% | Mar 20, 2020 | Tellabs Optical Line Terminal (OLT) 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tell... |
| CVE-2019-16258 | MEDIUM | 6.8 | 0.3% | Mar 20, 2020 | The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by ma... |
| CVE-2019-15665 | HIGH | 7.2 | 2.6% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to valida... |
| CVE-2019-15664 | LOW | 2.7 | 0.9% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to valida... |
| CVE-2019-15663 | LOW | 2.7 | 0.9% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to valida... |
| CVE-2019-15662 | LOW | 2.7 | 0.9% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to valida... |
| CVE-2019-15075 | HIGH | 7.5 | 0.4% | Mar 20, 2020 | An issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config/config.php does not have ... |
| CVE-2019-15661 | HIGH | 7.2 | 2.4% | Mar 20, 2020 | An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to valida... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now