2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-18901 | MEDIUM | 5.5 | 0.4% | Mar 2, 2020 | A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linu... |
| CVE-2019-18897 | HIGH | 7.8 | 0.4% | Mar 2, 2020 | A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE... |
| CVE-2019-12183 | HIGH | 7.5 | 2.1% | Mar 2, 2020 | Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the... |
| CVE-2019-17026 | HIGH | 8.8 | 46.6% | Mar 2, 2020 | Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are ... |
| CVE-2019-7007 | HIGH | 8.6 | 1.7% | Feb 28, 2020 | A directory traversal vulnerability has been found in the Avaya Equinox Management(iView)versions R9.1.9.0 and earlier. ... |
| CVE-2019-4301 | HIGH | 8.4 | 1.2% | Feb 28, 2020 | BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Runnin... |
| CVE-2019-10805 | HIGH | 7.5 | 1.4% | Feb 28, 2020 | valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspe... |
| CVE-2019-10804 | CRITICAL | 9.8 | 2.8% | Feb 28, 2020 | serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is... |
| CVE-2019-10803 | CRITICAL | 9.8 | 2.8% | Feb 28, 2020 | push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" i... |
| CVE-2019-10802 | CRITICAL | 9.8 | 2.4% | Feb 28, 2020 | giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is ... |
| CVE-2019-10801 | CRITICAL | 9.8 | 2.8% | Feb 28, 2020 | enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" functi... |
| CVE-2019-19943 | HIGH | 7.5 | 4.3% | Feb 28, 2020 | The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corru... |
| CVE-2019-15609 | CRITICAL | 9.8 | 3.9% | Feb 28, 2020 | The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability. |
| CVE-2019-10064 | HIGH | 7.5 | 3.7% | Feb 28, 2020 | hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding... |
| CVE-2019-8741 | HIGH | 7.5 | 2.4% | Feb 28, 2020 | A denial of service issue was addressed with improved input validation. |
| CVE-2019-3698 | HIGH | 7 | 0.7% | Feb 28, 2020 | UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server ... |
| CVE-2019-5326 | HIGH | 7.2 | 1.9% | Feb 27, 2020 | An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain ... |
| CVE-2019-5323 | HIGH | 7.2 | 2.6% | Feb 27, 2020 | There are command injection vulnerabilities present in the AirWave application. Certain input fields controlled by an ad... |
| CVE-2019-4669 | MEDIUM | 6.3 | 0.8% | Feb 27, 2020 | IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automa... |
| CVE-2019-12882 | — | — | — | Feb 27, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-18238 | HIGH | 7.5 | 0.5% | Feb 26, 2020 | In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, ... |
| CVE-2019-17275 | CRITICAL | 9.8 | 2.7% | Feb 26, 2020 | OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers. |
| CVE-2019-17274 | HIGH | 7.8 | 0.6% | Feb 26, 2020 | NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were ship... |
| CVE-2019-17039 | — | — | — | Feb 26, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-17038 | — | — | — | Feb 26, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now