2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13249 | — | — | 1.2% | Jul 4, 2019 | ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9e7a. |
| CVE-2019-13248 | — | — | 1.2% | Jul 4, 2019 | ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x0000000000002450. |
| CVE-2019-13247 | — | — | 1.2% | Jul 4, 2019 | ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x00000000000024ed. |
| CVE-2019-13246 | — | — | 1.2% | Jul 4, 2019 | FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601. |
| CVE-2019-13245 | — | — | 1.2% | Jul 4, 2019 | FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1. |
| CVE-2019-13244 | — | — | 1.2% | Jul 4, 2019 | FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d. |
| CVE-2019-13243 | — | — | 1.8% | Jul 4, 2019 | IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x00000000000249c6. |
| CVE-2019-13242 | — | — | 2.1% | Jul 4, 2019 | IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x0000000000013a98. |
| CVE-2019-13239 | — | — | 1.3% | Jul 4, 2019 | inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture. |
| CVE-2019-13238 | — | — | 1.4% | Jul 4, 2019 | An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to ... |
| CVE-2019-13233 | — | — | 0.5% | Jul 4, 2019 | In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry becau... |
| CVE-2019-13229 | — | — | 0.4% | Jul 4, 2019 | deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() function to write a... |
| CVE-2019-13228 | — | — | 0.4% | Jul 4, 2019 | deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, and... |
| CVE-2019-13227 | — | — | 0.4% | Jul 4, 2019 | In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone.log as root, and follows ... |
| CVE-2019-13208 | — | — | 0.4% | Jul 3, 2019 | WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for... |
| CVE-2019-9827 | — | — | 26.8% | Jul 3, 2019 | Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected ... |
| CVE-2019-13074 | — | — | 2.0% | Jul 3, 2019 | A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all availab... |
| CVE-2019-13207 | — | — | 2.0% | Jul 3, 2019 | nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c. |
| CVE-2019-12852 | — | — | 1.8% | Jul 3, 2019 | An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.49... |
| CVE-2019-12846 | — | — | 0.8% | Jul 3, 2019 | A user without the required permissions could gain access to some JetBrains TeamCity settings. The issue was fixed in Te... |
| CVE-2019-12845 | — | — | 0.9% | Jul 3, 2019 | The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixe... |
| CVE-2019-12844 | — | — | 0.8% | Jul 3, 2019 | A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamC... |
| CVE-2019-12843 | — | — | 0.8% | Jul 3, 2019 | A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fi... |
| CVE-2019-12842 | — | — | 0.8% | Jul 3, 2019 | A reflected XSS on a user page was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018... |
| CVE-2019-12841 | — | — | 1.1% | Jul 3, 2019 | Incorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue was fixed in TeamCity 2... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now