2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13002 | MEDIUM | 4.3 | 1.0% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. Unauthorized users were able to... |
| CVE-2019-13001 | MEDIUM | 4.3 | 0.7% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were v... |
| CVE-2019-12446 | HIGH | 7.5 | 1.2% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure thr... |
| CVE-2019-12445 | MEDIUM | 5.4 | 0.6% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute Jav... |
| CVE-2019-12444 | MEDIUM | 6.1 | 0.7% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 8.9 through 11.11. Wiki Pages contained a lack of inp... |
| CVE-2019-12443 | CRITICAL | 9.8 | 1.2% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Serve... |
| CVE-2019-12442 | MEDIUM | 6.1 | 0.7% | Mar 10, 2020 | An issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page contained a lack of input... |
| CVE-2019-12441 | HIGH | 7.5 | 0.9% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. The protected branches feature con... |
| CVE-2019-10705 | HIGH | 7.5 | 1.3% | Mar 10, 2020 | Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the d... |
| CVE-2019-20509 | — | — | — | Mar 10, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-12434 | MEDIUM | 4.3 | 0.8% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of... |
| CVE-2019-12433 | MEDIUM | 5.3 | 0.8% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 11.7 through 11.11. It has Improper Input Validation.... |
| CVE-2019-12432 | MEDIUM | 4.3 | 0.8% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Non-member users who subscribed t... |
| CVE-2019-12431 | MEDIUM | 4.3 | 0.8% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Restricted users could access the... |
| CVE-2019-12430 | HIGH | 8.8 | 2.6% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted payload would allow an aut... |
| CVE-2019-12429 | MEDIUM | 6.5 | 0.9% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11. Unprivileged users were able to a... |
| CVE-2019-12428 | CRITICAL | 9.8 | 1.4% | Mar 10, 2020 | An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory e... |
| CVE-2019-11345 | MEDIUM | 6.1 | 0.8% | Mar 10, 2020 | Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS. |
| CVE-2019-9859 | HIGH | 8.8 | 3.0% | Mar 10, 2020 | Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result... |
| CVE-2019-11686 | MEDIUM | 5.5 | 0.2% | Mar 10, 2020 | Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive... |
| CVE-2019-10706 | MEDIUM | 6.3 | 0.3% | Mar 10, 2020 | Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies on... |
| CVE-2019-10065 | MEDIUM | 4.3 | 0.8% | Mar 10, 2020 | An issue was discovered in Open Ticket Request System (OTRS) 7.0 through 7.0.6. An attacker who is logged into OTRS as a... |
| CVE-2019-4608 | MEDIUM | 5.4 | 0.7% | Mar 10, 2020 | IBM Tivoli Workload Scheduler 9.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr... |
| CVE-2019-19614 | HIGH | 7.5 | 1.2% | Mar 9, 2020 | An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing ... |
| CVE-2019-20226 | — | — | — | Mar 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now