2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-6625 | — | — | 0.8% | Jul 3, 2019 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a reflected cross-site sc... |
| CVE-2019-12570 | — | — | 1.7% | Jul 3, 2019 | A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an au... |
| CVE-2019-13186 | — | — | 0.9% | Jul 3, 2019 | In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user'... |
| CVE-2019-10721 | — | — | 1.0% | Jul 3, 2019 | BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.C... |
| CVE-2019-10717 | — | — | 5.4% | Jul 3, 2019 | BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter. |
| CVE-2019-13179 | — | — | 2.1% | Jul 2, 2019 | Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root... |
| CVE-2019-13178 | — | — | 1.7% | Jul 2, 2019 | modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the ... |
| CVE-2019-13177 | — | — | 1.6% | Jul 2, 2019 | verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static strin... |
| CVE-2019-6624 | — | — | 1.3% | Jul 2, 2019 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a... |
| CVE-2019-6622 | — | — | 1.8% | Jul 2, 2019 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, an undisclosed iControl... |
| CVE-2019-6621 | — | — | 2.0% | Jul 2, 2019 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and BIG... |
| CVE-2019-6620 | — | — | 1.8% | Jul 2, 2019 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4 and BIG-IQ 6.0.0-6.1.0 a... |
| CVE-2019-5599 | — | — | 5.2% | Jul 2, 2019 | In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack c... |
| CVE-2019-13175 | — | — | 0.9% | Jul 2, 2019 | Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instanc... |
| CVE-2019-13173 | — | — | 2.8% | Jul 2, 2019 | fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file tha... |
| CVE-2019-10975 | — | — | 0.6% | Jul 2, 2019 | An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which ... |
| CVE-2019-7253 | — | — | 3.0% | Jul 2, 2019 | Linear eMerge E3-Series devices allow Directory Traversal. |
| CVE-2019-7252 | — | — | 4.9% | Jul 2, 2019 | Linear eMerge E3-Series devices have Default Credentials. |
| CVE-2019-7260 | — | — | 6.6% | Jul 2, 2019 | Linear eMerge E3-Series devices have Cleartext Credentials in a Database. |
| CVE-2019-7264 | — | — | 2.2% | Jul 2, 2019 | Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform. |
| CVE-2019-7263 | — | — | 1.8% | Jul 2, 2019 | Linear eMerge E3-Series devices have a Version Control Failure. |
| CVE-2019-12594 | — | — | 6.7% | Jul 2, 2019 | DOSBox 0.74-2 has Incorrect Access Control. |
| CVE-2019-13056 | — | — | 0.8% | Jul 2, 2019 | An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-m... |
| CVE-2019-13155 | — | — | 2.1% | Jul 2, 2019 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (explo... |
| CVE-2019-13154 | — | — | 2.1% | Jul 2, 2019 | An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (explo... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now