2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-0054 | HIGH | 7.4 | 0.6% | Oct 9, 2019 | An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update clien... |
| CVE-2019-0051 | HIGH | 7.5 | 1.1% | Oct 9, 2019 | SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS... |
| CVE-2019-0050 | HIGH | 7.5 | 1.3% | Oct 9, 2019 | Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1... |
| CVE-2019-0047 | HIGH | 8.8 | 1.6% | Oct 9, 2019 | A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attac... |
| CVE-2019-17389 | HIGH | 7.5 | 1.4% | Oct 9, 2019 | In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP sock... |
| CVE-2019-6469 | HIGH | 7.5 | 1.9% | Oct 9, 2019 | An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failur... |
| CVE-2019-6468 | HIGH | 7.5 | 2.5% | Oct 9, 2019 | In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Cl... |
| CVE-2019-6467 | HIGH | 7.5 | 5.4% | Oct 9, 2019 | A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespac... |
| CVE-2019-4558 | HIGH | 7.8 | 1.2% | Oct 9, 2019 | A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spect... |
| CVE-2019-17375 | HIGH | 8.8 | 1.1% | Oct 9, 2019 | cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517). |
| CVE-2019-17128 | HIGH | 7.5 | 1.8% | Oct 9, 2019 | Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters a... |
| CVE-2019-15226 | HIGH | 7.5 | 65.4% | Oct 9, 2019 | Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the to... |
| CVE-2019-13529 | HIGH | 8.8 | 2.2% | Oct 9, 2019 | An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform action... |
| CVE-2019-17372 | HIGH | 8.1 | 1.7% | Oct 9, 2019 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanCha... |
| CVE-2019-17370 | HIGH | 7.2 | 2.1% | Oct 9, 2019 | OTCMS v3.85 allows arbitrary PHP Code Execution because admin/sysCheckFile_deal.php blocks "into outfile" in a SELECT st... |
| CVE-2019-17353 | HIGH | 8.2 | 3.0% | Oct 9, 2019 | An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly wi... |
| CVE-2019-15719 | HIGH | 8 | 2.0% | Oct 9, 2019 | Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pb... |
| CVE-2019-13051 | HIGH | 8.8 | 12.5% | Oct 9, 2019 | Pi-Hole 4.3 allows Command Injection. |
| CVE-2019-17186 | HIGH | 8.8 | 5.9% | Oct 8, 2019 | /var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication remote code ... |
| CVE-2019-14846 | HIGH | 7.8 | 0.5% | Oct 8, 2019 | In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were l... |
| CVE-2019-10969 | HIGH | 7.2 | 8.7% | Oct 8, 2019 | Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthor... |
| CVE-2019-17187 | HIGH | 7.5 | 10.8% | Oct 8, 2019 | /var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Direct... |
| CVE-2019-17359 | HIGH | 7.5 | 8.9% | Oct 8, 2019 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resulta... |
| CVE-2019-17352 | HIGH | 7.5 | 1.7% | Oct 8, 2019 | In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() functi... |
| CVE-2019-17107 | HIGH | 8.8 | 3.6% | Oct 8, 2019 | minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the comman... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now