2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13640 | — | — | 7.9% | Jul 17, 2019 | In qBittorrent before 4.1.7, the function Application::runExternalProgram() located in app/application.cpp allows comman... |
| CVE-2019-8932 | — | — | 1.2% | Jul 17, 2019 | Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, et... |
| CVE-2019-8931 | — | — | 1.1% | Jul 17, 2019 | Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the... |
| CVE-2019-3973 | — | — | 0.4% | Jul 17, 2019 | Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filte... |
| CVE-2019-3972 | — | — | 0.4% | Jul 17, 2019 | Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprot... |
| CVE-2019-3971 | — | — | 0.4% | Jul 17, 2019 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its L... |
| CVE-2019-3970 | — | — | 0.4% | Jul 17, 2019 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's... |
| CVE-2019-3969 | — | — | 0.6% | Jul 17, 2019 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of C... |
| CVE-2019-13637 | — | — | 2.6% | Jul 17, 2019 | In LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted system. This vulnerabi... |
| CVE-2019-13636 | — | — | 3.9% | Jul 17, 2019 | In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affect... |
| CVE-2019-12914 | — | — | 1.2% | Jul 17, 2019 | Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, et... |
| CVE-2019-12913 | — | — | 0.4% | Jul 17, 2019 | Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the... |
| CVE-2019-12912 | — | — | 0.4% | Jul 17, 2019 | Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the... |
| CVE-2019-12911 | — | — | 1.2% | Jul 17, 2019 | Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, et... |
| CVE-2019-11772 | — | — | 2.1% | Jul 17, 2019 | In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byt... |
| CVE-2019-1010287 | — | — | 4.3% | Jul 17, 2019 | Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to ex... |
| CVE-2019-1010275 | — | — | 1.4% | Jul 17, 2019 | helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could co... |
| CVE-2019-1010263 | — | — | 1.3% | Jul 17, 2019 | Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authen... |
| CVE-2019-13577 | — | — | 24.4% | Jul 17, 2019 | SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string ... |
| CVE-2019-13493 | — | — | 1.6% | Jul 17, 2019 | In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged u... |
| CVE-2019-13448 | — | — | 0.8% | Jul 17, 2019 | An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious ... |
| CVE-2019-13447 | — | — | 1.7% | Jul 17, 2019 | An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious ... |
| CVE-2019-12876 | — | — | 4.6% | Jul 17, 2019 | Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, l... |
| CVE-2019-11535 | — | — | 5.1% | Jul 17, 2019 | Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) al... |
| CVE-2019-13631 | — | — | 0.8% | Jul 17, 2019 | In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now