2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14855 | HIGH | 7.5 | 1.1% | Mar 20, 2020 | A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An att... |
| CVE-2019-19345 | HIGH | 7.8 | 0.3% | Mar 20, 2020 | A vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an insecure modification v... |
| CVE-2019-10221 | MEDIUM | 6.1 | 1.3% | Mar 20, 2020 | A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from t... |
| CVE-2019-10179 | MEDIUM | 6.1 | 0.9% | Mar 20, 2020 | A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not ... |
| CVE-2019-19487 | HIGH | 8.8 | 5.3% | Mar 20, 2020 | Command Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to achieve command injection ... |
| CVE-2019-19486 | MEDIUM | 6.5 | 1.7% | Mar 20, 2020 | Local File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to traverse paths via a pl... |
| CVE-2019-19484 | MEDIUM | 6.1 | 0.9% | Mar 20, 2020 | Open redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker to craft a payload and e... |
| CVE-2019-19029 | HIGH | 7.2 | 2.1% | Mar 20, 2020 | Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Har... |
| CVE-2019-19026 | MEDIUM | 4.9 | 1.4% | Mar 20, 2020 | Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware ... |
| CVE-2019-19025 | HIGH | 8.8 | 1.0% | Mar 20, 2020 | Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry fo... |
| CVE-2019-19023 | HIGH | 8.8 | 1.6% | Mar 20, 2020 | Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware... |
| CVE-2019-18785 | HIGH | 7.5 | 1.0% | Mar 20, 2020 | SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials. |
| CVE-2019-18782 | MEDIUM | 5.3 | 0.9% | Mar 20, 2020 | SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 does not correctly implement the .htaccess protection mechan... |
| CVE-2019-16108 | HIGH | 7.5 | 1.1% | Mar 20, 2020 | phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode. |
| CVE-2019-16072 | CRITICAL | 9.8 | 25.3% | Mar 20, 2020 | An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows... |
| CVE-2019-16071 | HIGH | 8.8 | 1.0% | Mar 20, 2020 | Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability t... |
| CVE-2019-16529 | MEDIUM | 5.3 | 0.9% | Mar 19, 2020 | An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit summaries are still vi... |
| CVE-2019-16069 | MEDIUM | 6.1 | 0.7% | Mar 19, 2020 | A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that... |
| CVE-2019-16068 | HIGH | 8.8 | 0.9% | Mar 19, 2020 | A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to tri... |
| CVE-2019-16063 | HIGH | 7.5 | 0.7% | Mar 19, 2020 | NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an atta... |
| CVE-2019-15539 | MEDIUM | 6.1 | 1.1% | Mar 19, 2020 | The proj_doc_edit_page.php Project Documentation feature in MantisBT before 2.21.3 has a stored cross-site scripting (XS... |
| CVE-2019-15124 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | In the MobileFrontend extension for MediaWiki, XSS exists within the edit summary field of the watchlist feed. This affe... |
| CVE-2019-20526 | MEDIUM | 6.1 | 0.9% | Mar 19, 2020 | Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter. |
| CVE-2019-20525 | MEDIUM | 6.1 | 0.9% | Mar 19, 2020 | Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter. |
| CVE-2019-20521 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/ URI. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now