2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-16382 | CRITICAL | 9.8 | 2.9% | Mar 19, 2020 | An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protecti... |
| CVE-2019-11361 | HIGH | 8.8 | 3.0% | Mar 19, 2020 | Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escala... |
| CVE-2019-16012 | HIGH | 8.1 | 54.2% | Mar 19, 2020 | A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to... |
| CVE-2019-16010 | MEDIUM | 4.8 | 0.8% | Mar 19, 2020 | A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to cond... |
| CVE-2019-14878 | MEDIUM | 6.5 | 1.3% | Mar 19, 2020 | In the __d2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc i... |
| CVE-2019-14877 | MEDIUM | 6.5 | 1.3% | Mar 19, 2020 | In the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc... |
| CVE-2019-14876 | MEDIUM | 6.5 | 1.3% | Mar 19, 2020 | In the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Ballo... |
| CVE-2019-14875 | MEDIUM | 6.5 | 1.3% | Mar 19, 2020 | In the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Bal... |
| CVE-2019-14874 | MEDIUM | 6.5 | 1.3% | Mar 19, 2020 | In the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc i... |
| CVE-2019-14873 | MEDIUM | 6.5 | 1.3% | Mar 19, 2020 | In the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc i... |
| CVE-2019-5104 | — | — | — | Mar 19, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9013. Reason: This candidate is a duplicate of C... |
| CVE-2019-12416 | MEDIUM | 6.1 | 2.6% | Mar 19, 2020 | we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selec... |
| CVE-2019-20527 | MEDIUM | 6.1 | 0.9% | Mar 19, 2020 | Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter. |
| CVE-2019-20524 | MEDIUM | 6.1 | 0.7% | Mar 19, 2020 | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter. |
| CVE-2019-20523 | MEDIUM | 6.1 | 0.7% | Mar 19, 2020 | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter. |
| CVE-2019-20522 | MEDIUM | 6.1 | 0.7% | Mar 19, 2020 | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter. |
| CVE-2019-19336 | MEDIUM | 6.1 | 0.9% | Mar 19, 2020 | A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.... |
| CVE-2019-12130 | CRITICAL | 9.8 | 1.7% | Mar 19, 2020 | In ONAP CLI through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and... |
| CVE-2019-12129 | CRITICAL | 9.8 | 1.7% | Mar 19, 2020 | In ONAP MSB through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and... |
| CVE-2019-12128 | CRITICAL | 9.8 | 1.7% | Mar 19, 2020 | In ONAP SO through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/... |
| CVE-2019-14872 | MEDIUM | 6.5 | 1.5% | Mar 19, 2020 | The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without ch... |
| CVE-2019-20485 | MEDIUM | 5.7 | 0.8% | Mar 19, 2020 | qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, whic... |
| CVE-2019-19677 | MEDIUM | 4.3 | 0.7% | Mar 18, 2020 | arxes-tolina 3.0.0 allows User Enumeration. |
| CVE-2019-19676 | CRITICAL | 9.6 | 1.3% | Mar 18, 2020 | A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering form... |
| CVE-2019-18979 | HIGH | 7.8 | 0.4% | Mar 18, 2020 | Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation u... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now