2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13183 | — | — | 0.8% | Jul 7, 2019 | Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings. |
| CVE-2019-13375 | — | — | 28.2% | Jul 6, 2019 | A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 in PayAction.class.php wi... |
| CVE-2019-13374 | — | — | 2.4% | Jul 6, 2019 | A cross-site scripting (XSS) vulnerability in resource view in PayAction.class.php in D-Link Central WiFi Manager CWM(10... |
| CVE-2019-13373 | — | — | 68.0% | Jul 6, 2019 | An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validate... |
| CVE-2019-13362 | — | — | 1.0% | Jul 6, 2019 | Codedoc v3.2 has a stack-based buffer overflow in add_variable in codedoc.c, related to codedoc_strlcpy. |
| CVE-2019-10639 | — | — | 3.3% | Jul 5, 2019 | The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclo... |
| CVE-2019-10638 | — | — | 2.6% | Jul 5, 2019 | In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for ... |
| CVE-2019-13352 | — | — | 2.9% | Jul 5, 2019 | WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot... |
| CVE-2019-13351 | — | — | 1.7% | Jul 5, 2019 | posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "... |
| CVE-2019-12971 | — | — | 2.2% | Jul 5, 2019 | BKS EBK Ethernet-Buskoppler Pro before 3.01 allows Unrestricted Upload of a File with a Dangerous Type. |
| CVE-2019-13345 | — | — | 74.5% | Jul 5, 2019 | The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter. |
| CVE-2019-13344 | — | — | 45.1% | Jul 5, 2019 | An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthent... |
| CVE-2019-13341 | — | — | 0.6% | Jul 5, 2019 | In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie. |
| CVE-2019-13340 | — | — | 0.6% | Jul 5, 2019 | In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a us... |
| CVE-2019-13339 | — | — | 0.6% | Jul 5, 2019 | In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used to get a user's cookie... |
| CVE-2019-5982 | — | — | 0.4% | Jul 5, 2019 | Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to cond... |
| CVE-2019-5981 | — | — | 0.9% | Jul 5, 2019 | Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary exe... |
| CVE-2019-5974 | — | — | 1.0% | Jul 5, 2019 | Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to h... |
| CVE-2019-5971 | — | — | 1.0% | Jul 5, 2019 | Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijac... |
| CVE-2019-5969 | — | — | 1.1% | Jul 5, 2019 | Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites ... |
| CVE-2019-5968 | — | — | 0.7% | Jul 5, 2019 | Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authen... |
| CVE-2019-5967 | — | — | 1.0% | Jul 5, 2019 | Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote attackers to inject arbitrary w... |
| CVE-2019-5966 | — | — | 1.0% | Jul 5, 2019 | Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitra... |
| CVE-2019-5965 | — | — | 1.1% | Jul 5, 2019 | Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web ... |
| CVE-2019-5964 | — | — | 0.7% | Jul 5, 2019 | iDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass authentication to access the ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now