2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-13170MEDIUM6.5Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Succ...
CVE-2019-13169CRITICAL9.8Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Con...
CVE-2019-13168CRITICAL9.8Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the att...
CVE-2019-13167MEDIUM6.1Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and ...
CVE-2019-13166HIGH7.5Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credential...
CVE-2019-13165CRITICAL9.8Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the req...
CVE-2019-13395HIGH8.8The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify a...
CVE-2019-13394CRITICAL9.8The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses HTTP Basic Authentication over cleartext HTTP.
CVE-2019-13393HIGH7.5The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character passphrase for the administra...
CVE-2019-13206HIGH8.8Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in...
CVE-2019-13205HIGH7.5All configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were accessible ...
CVE-2019-13204CRITICAL9.8Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by multiple buffer overflow vulnerabi...
CVE-2019-13203HIGH8.8Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by an integer overflow vulnerability ...
CVE-2019-19799MEDIUM5.3Zoho ManageEngine Applications Manager before 14600 allows a remote unauthenticated attacker to disclose license related...
CVE-2019-12182CRITICAL9.8Directory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated remote attackers to execu...
CVE-2019-6699MEDIUM5.4An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may allow an attacker to execut...
CVE-2019-19756MEDIUM6An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to pe...
CVE-2019-16157MEDIUM6.5An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view...
CVE-2019-17653HIGH8.8A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote...
CVE-2019-17658CRITICAL9.8An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior all...
CVE-2019-16156MEDIUM6.1An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6....
CVE-2019-12278MEDIUM4.3Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Lef...
CVE-2019-11355HIGH7.2An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / c...
CVE-2019-11343CRITICAL9.8Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeConditi...
CVE-2019-14626MEDIUM6.7Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may all...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now