2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-10097 | HIGH | 7.2 | 52.9% | Sep 26, 2019 | In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using t... |
| CVE-2019-0203 | HIGH | 7.5 | 3.4% | Sep 26, 2019 | In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit ... |
| CVE-2019-14844 | HIGH | 7.5 | 4.4% | Sep 26, 2019 | A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash ... |
| CVE-2019-16901 | HIGH | 7.5 | 1.3% | Sep 26, 2019 | Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x00000000... |
| CVE-2019-16900 | HIGH | 7.5 | 1.3% | Sep 26, 2019 | Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c. |
| CVE-2019-16899 | HIGH | 7.5 | 1.3% | Sep 26, 2019 | In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfo... |
| CVE-2019-16253 | HIGH | 7.8 | 1.2% | Sep 25, 2019 | The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacke... |
| CVE-2019-12717 | HIGH | 7.8 | 0.4% | Sep 25, 2019 | A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco NX-OS Software could allow an aut... |
| CVE-2019-12671 | HIGH | 7.8 | 0.4% | Sep 25, 2019 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on... |
| CVE-2019-12669 | HIGH | 7.5 | 1.8% | Sep 25, 2019 | A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Softwa... |
| CVE-2019-12665 | HIGH | 7.4 | 1.1% | Sep 25, 2019 | A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attac... |
| CVE-2019-12664 | HIGH | 7.5 | 1.4% | Sep 25, 2019 | A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Inte... |
| CVE-2019-12663 | HIGH | 8.6 | 1.8% | Sep 25, 2019 | A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Softwa... |
| CVE-2019-12659 | HIGH | 7.5 | 1.8% | Sep 25, 2019 | A vulnerability in the HTTP server code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to caus... |
| CVE-2019-12658 | HIGH | 7.5 | 2.0% | Sep 25, 2019 | A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remo... |
| CVE-2019-12657 | HIGH | 7.5 | 2.0% | Sep 25, 2019 | A vulnerability in Unified Threat Defense (UTD) in Cisco IOS XE Software could allow an unauthenticated, remote attacker... |
| CVE-2019-12656 | HIGH | 7.5 | 1.8% | Sep 25, 2019 | A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote at... |
| CVE-2019-12655 | HIGH | 7.5 | 2.0% | Sep 25, 2019 | A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT ... |
| CVE-2019-12654 | HIGH | 7.5 | 2.0% | Sep 25, 2019 | A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an ... |
| CVE-2019-12653 | HIGH | 7.5 | 2.0% | Sep 25, 2019 | A vulnerability in the Raw Socket Transport feature of Cisco IOS XE Software could allow an unauthenticated, remote atta... |
| CVE-2019-12652 | HIGH | 7.5 | 2.7% | Sep 25, 2019 | A vulnerability in the ingress packet processing function of Cisco IOS Software for Cisco Catalyst 4000 Series Switches ... |
| CVE-2019-6656 | HIGH | 7.5 | 1.4% | Sep 25, 2019 | BIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in the log files. Vulnerabl... |
| CVE-2019-16889 | HIGH | 7.5 | 5.1% | Sep 25, 2019 | Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.c... |
| CVE-2019-14666 | HIGH | 8.8 | 2.2% | Sep 25, 2019 | GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack ... |
| CVE-2019-12651 | HIGH | 8.8 | 2.5% | Sep 25, 2019 | Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated,... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now