2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19225 | HIGH | 7.5 | 2.5% | Mar 4, 2020 | A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an a... |
| CVE-2019-19224 | HIGH | 7.5 | 2.5% | Mar 4, 2020 | A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an a... |
| CVE-2019-19223 | HIGH | 7.5 | 4.3% | Mar 4, 2020 | A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an a... |
| CVE-2019-19222 | MEDIUM | 5.4 | 1.9% | Mar 4, 2020 | A Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an authenticated attack... |
| CVE-2019-8401 | — | — | — | Mar 4, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2019-3404 | HIGH | 7.5 | 0.9% | Mar 4, 2020 | By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withou... |
| CVE-2019-19792 | MEDIUM | 6.7 | 0.4% | Mar 3, 2020 | A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by ... |
| CVE-2019-17549 | MEDIUM | 6.5 | 1.2% | Mar 3, 2020 | ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes.... |
| CVE-2019-12916 | — | — | — | Mar 3, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2019-12915 | — | — | — | Mar 3, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2019-3696 | HIGH | 7.3 | 0.5% | Mar 3, 2020 | A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterp... |
| CVE-2019-3695 | HIGH | 7.8 | 0.5% | Mar 3, 2020 | A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance... |
| CVE-2019-14893 | CRITICAL | 9.8 | 4.1% | Mar 2, 2020 | A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit poly... |
| CVE-2019-19608 | CRITICAL | 9.8 | 1.7% | Mar 2, 2020 | A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an u... |
| CVE-2019-19607 | CRITICAL | 9.8 | 1.7% | Mar 2, 2020 | A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unau... |
| CVE-2019-19371 | MEDIUM | 6.1 | 1.0% | Mar 2, 2020 | A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could ... |
| CVE-2019-19370 | MEDIUM | 6.1 | 1.0% | Mar 2, 2020 | A cross-site scripting (XSS) vulnerability in the web conferencing component of the Mitel MiCollab application before 9.... |
| CVE-2019-18863 | MEDIUM | 5.9 | 0.5% | Mar 2, 2020 | A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versi... |
| CVE-2019-18903 | CRITICAL | 9.8 | 2.4% | Mar 2, 2020 | A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE L... |
| CVE-2019-18902 | CRITICAL | 9.8 | 2.4% | Mar 2, 2020 | A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE L... |
| CVE-2019-14892 | CRITICAL | 9.8 | 5.6% | Mar 2, 2020 | A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymor... |
| CVE-2019-20489 | CRITICAL | 9.8 | 1.3% | Mar 2, 2020 | An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. The web management interface (setup.cgi) has an authentic... |
| CVE-2019-20488 | CRITICAL | 9.8 | 2.1% | Mar 2, 2020 | An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface (set... |
| CVE-2019-20487 | HIGH | 8.8 | 0.5% | Mar 2, 2020 | An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management cons... |
| CVE-2019-20486 | MEDIUM | 6.1 | 0.7% | Mar 2, 2020 | An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and adv_index.htm) within the w... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now