2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20520 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI. |
| CVE-2019-20519 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the user/ URI, as demonstrated by a crafted e-mail address. |
| CVE-2019-20518 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the project/ URI. |
| CVE-2019-20517 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the contact/ URI. |
| CVE-2019-20516 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the blog/ URI. |
| CVE-2019-20515 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the addresses/ URI. |
| CVE-2019-20514 | MEDIUM | 6.1 | 0.8% | Mar 19, 2020 | ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the address/ URI. |
| CVE-2019-20513 | MEDIUM | 6.1 | 0.5% | Mar 19, 2020 | Open edX Ironwood.1 allows support/certificates?user= reflected XSS. |
| CVE-2019-16375 | MEDIUM | 5.4 | 1.1% | Mar 19, 2020 | An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5... |
| CVE-2019-16338 | HIGH | 7.8 | 1.0% | Mar 19, 2020 | The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file. |
| CVE-2019-16337 | HIGH | 7.8 | 1.1% | Mar 19, 2020 | The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file. |
| CVE-2019-16070 | MEDIUM | 6.1 | 0.7% | Mar 19, 2020 | A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that... |
| CVE-2019-16067 | HIGH | 7.5 | 0.8% | Mar 19, 2020 | NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web appli... |
| CVE-2019-16066 | HIGH | 8.8 | 2.2% | Mar 19, 2020 | An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS 65.0.0 an... |
| CVE-2019-16065 | HIGH | 8.8 | 2.8% | Mar 19, 2020 | A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows a... |
| CVE-2019-16064 | CRITICAL | 9.6 | 1.3% | Mar 19, 2020 | NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user... |
| CVE-2019-16062 | MEDIUM | 6.5 | 0.8% | Mar 19, 2020 | NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an... |
| CVE-2019-16061 | HIGH | 8.8 | 1.0% | Mar 19, 2020 | A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable pe... |
| CVE-2019-15656 | HIGH | 7.5 | 1.3% | Mar 19, 2020 | D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted reques... |
| CVE-2019-15655 | HIGH | 7.5 | 1.4% | Mar 19, 2020 | D-Link DSL-2875AL devices through 1.00.05 are prone to password disclosure via a simple crafted /romfile.cfg request to ... |
| CVE-2019-15654 | HIGH | 7.5 | 1.5% | Mar 19, 2020 | Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download... |
| CVE-2019-15653 | HIGH | 7.5 | 0.8% | Mar 19, 2020 | Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism.... |
| CVE-2019-12127 | CRITICAL | 9.8 | 1.2% | Mar 19, 2020 | In ONAP OOM through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and... |
| CVE-2019-12126 | CRITICAL | 9.8 | 1.2% | Mar 19, 2020 | In ONAP DCAE through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, an... |
| CVE-2019-12125 | CRITICAL | 9.8 | 1.2% | Mar 19, 2020 | In ONAP Logging through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285,... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now