2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-17347 | HIGH | 7.8 | 0.4% | Oct 8, 2019 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privil... |
| CVE-2019-17346 | HIGH | 8.8 | 0.3% | Oct 8, 2019 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privil... |
| CVE-2019-17342 | HIGH | 7 | 0.3% | Oct 8, 2019 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privil... |
| CVE-2019-17341 | HIGH | 7.8 | 0.3% | Oct 8, 2019 | An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privil... |
| CVE-2019-17340 | HIGH | 8.8 | 0.4% | Oct 8, 2019 | An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privilege... |
| CVE-2019-17232 | HIGH | 7.5 | 3.5% | Oct 7, 2019 | Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options im... |
| CVE-2019-16913 | HIGH | 7.8 | 0.4% | Oct 7, 2019 | PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILES(X86)%\PCProtect with very weak folder permissions, gr... |
| CVE-2019-13120 | HIGH | 7.5 | 1.2% | Oct 7, 2019 | Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable... |
| CVE-2019-3745 | HIGH | 7.3 | 0.3% | Oct 7, 2019 | The vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint ... |
| CVE-2019-17314 | HIGH | 7.2 | 1.9% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user. |
| CVE-2019-17313 | HIGH | 8.8 | 2.0% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user. |
| CVE-2019-17312 | HIGH | 8.8 | 2.0% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user. |
| CVE-2019-17311 | HIGH | 8.8 | 2.0% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user. |
| CVE-2019-17310 | HIGH | 7.2 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user. |
| CVE-2019-17309 | HIGH | 7.2 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user. |
| CVE-2019-17308 | HIGH | 8.8 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user. |
| CVE-2019-17307 | HIGH | 7.2 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user. |
| CVE-2019-17306 | HIGH | 7.2 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user. |
| CVE-2019-17305 | HIGH | 8.8 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user. |
| CVE-2019-17304 | HIGH | 7.2 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user. |
| CVE-2019-17303 | HIGH | 8.8 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user. |
| CVE-2019-17302 | HIGH | 8.8 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user. |
| CVE-2019-17301 | HIGH | 7.2 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user. |
| CVE-2019-17300 | HIGH | 8.8 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user. |
| CVE-2019-17299 | HIGH | 7.2 | 1.4% | Oct 7, 2019 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now