2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-1010030 | — | — | — | Jul 15, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11501. Reason: This candidate is a reservation d... |
| CVE-2019-1010028 | — | — | 0.7% | Jul 15, 2019 | phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting (XSS). T... |
| CVE-2019-1010017 | — | — | 1.6% | Jul 15, 2019 | libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by consuming resources. The compo... |
| CVE-2019-1010016 | — | — | 1.0% | Jul 15, 2019 | Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/prod... |
| CVE-2019-1010011 | — | — | — | Jul 15, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10753, CVE-2018-10771. Reason: This candidate is... |
| CVE-2019-1010009 | — | — | 2.8% | Jul 15, 2019 | DGLogik Inc DGLux Server All Versions is affected by: Insecure Permissions. The impact is: Remote Execution, Credential ... |
| CVE-2019-1010008 | — | — | 0.9% | Jul 15, 2019 | OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS). The impact is: Theoretically low, bu... |
| CVE-2019-1010005 | — | — | 1.2% | Jul 15, 2019 | HexoEditor v1.1.8-beta is affected by: XSS to code execution. |
| CVE-2019-1010004 | — | — | 1.3% | Jul 15, 2019 | SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The compon... |
| CVE-2019-13598 | — | — | 4.2% | Jul 14, 2019 | LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via t... |
| CVE-2019-13597 | — | — | 14.3% | Jul 14, 2019 | _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts vi... |
| CVE-2019-13594 | — | — | 0.6% | Jul 14, 2019 | In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers ... |
| CVE-2019-13589 | — | — | 4.3% | Jul 14, 2019 | The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third... |
| CVE-2019-12827 | — | — | 4.2% | Jul 12, 2019 | Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allo... |
| CVE-2019-11242 | — | — | 0.5% | Jul 12, 2019 | A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior... |
| CVE-2019-1010312 | — | — | — | Jul 12, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11455. Reason: This candidate is a reservation d... |
| CVE-2019-1010311 | — | — | — | Jul 12, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11454. Reason: This candidate is a reservation d... |
| CVE-2019-1010310 | — | — | 0.7% | Jul 12, 2019 | GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in ... |
| CVE-2019-1010309 | — | — | — | Jul 12, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9686. Reason: This candidate is a reservation du... |
| CVE-2019-12731 | — | — | 0.3% | Jul 12, 2019 | The Windows versions of Snapview Mikogo, versions before 5.10.2 are affected by insecure implementations which allow loc... |
| CVE-2019-13027 | — | — | 2.7% | Jul 12, 2019 | Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetai... |
| CVE-2019-13494 | — | — | 3.9% | Jul 12, 2019 | nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long var... |
| CVE-2019-13574 | — | — | 7.6% | Jul 12, 2019 | In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execu... |
| CVE-2019-10935 | — | — | 1.3% | Jul 11, 2019 | A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions <... |
| CVE-2019-10933 | — | — | 0.8% | Jul 11, 2019 | A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Pow... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now