2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-3762 | HIGH | 7.5 | 0.6% | Mar 18, 2020 | Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulner... |
| CVE-2019-20529 | HIGH | 7.5 | 1.3% | Mar 18, 2020 | In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were b... |
| CVE-2019-20528 | MEDIUM | 6.1 | 0.9% | Mar 18, 2020 | Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter. |
| CVE-2019-20512 | MEDIUM | 6.1 | 0.4% | Mar 18, 2020 | Open edX Ironwood.1 allows support/certificates?course_id= reflected XSS. |
| CVE-2019-20511 | MEDIUM | 6.1 | 0.7% | Mar 18, 2020 | ERPNext 11.1.47 allows blog?blog_category= Frame Injection. |
| CVE-2019-18582 | HIGH | 7.2 | 4.6% | Mar 18, 2020 | Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to pat... |
| CVE-2019-18581 | HIGH | 7.2 | 3.9% | Mar 18, 2020 | Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to pat... |
| CVE-2019-12921 | MEDIUM | 6.5 | 8.0% | Mar 18, 2020 | In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a craft... |
| CVE-2019-12769 | HIGH | 8.8 | 0.8% | Mar 18, 2020 | SolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forg... |
| CVE-2019-12370 | MEDIUM | 6.1 | 1.1% | Mar 18, 2020 | The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src a... |
| CVE-2019-12369 | MEDIUM | 6.1 | 1.0% | Mar 18, 2020 | The TypeApp application through 1.9.5.35 for Android allows XSS via an event attribute and arbitrary file loading via a ... |
| CVE-2019-12368 | MEDIUM | 6.1 | 1.0% | Mar 18, 2020 | The Edison Mail application through 1.7.1 for Android allows XSS via an event attribute and arbitrary file loading via a... |
| CVE-2019-12367 | MEDIUM | 6.1 | 1.0% | Mar 18, 2020 | The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute and arbitrary file loading via a... |
| CVE-2019-12366 | MEDIUM | 6.1 | 1.0% | Mar 18, 2020 | The Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary file loading via a src a... |
| CVE-2019-12365 | MEDIUM | 6.1 | 1.0% | Mar 18, 2020 | The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a sr... |
| CVE-2019-12132 | CRITICAL | 9.8 | 1.5% | Mar 18, 2020 | An issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted filename parameter, an unau... |
| CVE-2019-12131 | CRITICAL | 9.1 | 1.2% | Mar 18, 2020 | An issue was detected in ONAP APPC through Dublin and SDC through Dublin. By setting a USER_ID parameter in an HTTP head... |
| CVE-2019-12124 | CRITICAL | 9.1 | 1.2% | Mar 18, 2020 | An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticate... |
| CVE-2019-12123 | HIGH | 8.8 | 1.3% | Mar 18, 2020 | An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an auth... |
| CVE-2019-12122 | MEDIUM | 6.5 | 0.6% | Mar 18, 2020 | An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an atta... |
| CVE-2019-12121 | HIGH | 7.5 | 0.7% | Mar 18, 2020 | An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSi... |
| CVE-2019-12120 | CRITICAL | 9.8 | 2.1% | Mar 18, 2020 | An issue was discovered in ONAP VNFSDK through Dublin. By accessing port 8000 of demo-vnfsdk-vnfsdk, an unauthenticated ... |
| CVE-2019-12119 | CRITICAL | 9.8 | 2.1% | Mar 18, 2020 | An issue was discovered in ONAP SDC through Dublin. By accessing port 7000 of demo-sdc-sdc-wfd-fe pod, an unauthenticate... |
| CVE-2019-12118 | CRITICAL | 9.8 | 2.1% | Mar 18, 2020 | An issue was discovered in ONAP SDC through Dublin. By accessing port 7001 of demo-sdc-sdc-wfd-be pod, an unauthenticate... |
| CVE-2019-12117 | CRITICAL | 9.8 | 2.1% | Mar 18, 2020 | An issue was discovered in ONAP SDC through Dublin. By accessing port 4001 of demo-sdc-sdc-onboarding-be pod, an unauthe... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now