2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2019-25215HIGH7.3The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in near...
CVE-2019-25213HIGH7.5The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to,...
CVE-2019-6198HIGH7.8A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to esc...
CVE-2019-6197HIGH7.8A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to esc...
CVE-2019-16641HIGH8.4An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attac...
CVE-2019-16640HIGH7.5An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mis...
CVE-2019-16638HIGH7.5An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data...
CVE-2019-6268HIGH7.5RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Direc...
CVE-2019-25162HIGH7.8In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap ...
CVE-2019-25160HIGH7.1In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There ...
CVE-2019-16471HIGH7.8Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could resul...
CVE-2019-16470HIGH7.8Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability tha...
CVE-2019-13689HIGH7.8Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perfo...
CVE-2019-16283HIGH7.8A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbit...
CVE-2019-25150HIGH8.8The Email Templates plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.3. This mak...
CVE-2019-25142HIGH8.8The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and in...
CVE-2019-25137HIGH7.2Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:s...
CVE-2019-8963HIGH7.5A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST...
CVE-2019-8720HIGH8.8A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead...
CVE-2019-25104HIGH7.5A vulnerability has been found in rtcwcoop 1.0.2 and classified as problematic. Affected by this vulnerability is the fu...
CVE-2019-25103HIGH7.5A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is...
CVE-2019-25102HIGH7.5A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown functio...
CVE-2019-25053HIGH7.5A path traversal vulnerability exists in Sage FRP 1000 before November 2019. This allows remote unauthenticated attacker...
CVE-2019-13768HIGH7.4Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sand...
CVE-2019-25073HIGH7.5Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read ...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now