2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-3796 | — | — | — | Feb 26, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-19134 | MEDIUM | 6.1 | 5.7% | Feb 26, 2020 | The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index... |
| CVE-2019-4000 | HIGH | 7.8 | 0.7% | Feb 25, 2020 | Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, ... |
| CVE-2019-3999 | HIGH | 7.8 | 8.6% | Feb 25, 2020 | Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, u... |
| CVE-2019-12863 | MEDIUM | 4.8 | 1.1% | Feb 25, 2020 | SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the We... |
| CVE-2019-5165 | HIGH | 7.2 | 2.2% | Feb 25, 2020 | An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware vers... |
| CVE-2019-5162 | HIGH | 8.8 | 2.7% | Feb 25, 2020 | An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AW... |
| CVE-2019-5153 | HIGH | 8.8 | 4.6% | Feb 25, 2020 | An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa... |
| CVE-2019-5148 | HIGH | 7.5 | 2.5% | Feb 25, 2020 | An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware vers... |
| CVE-2019-5143 | HIGH | 8.8 | 4.7% | Feb 25, 2020 | An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A f... |
| CVE-2019-5142 | HIGH | 7.2 | 6.9% | Feb 25, 2020 | An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware versi... |
| CVE-2019-5141 | HIGH | 8.8 | 5.1% | Feb 25, 2020 | An exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware versio... |
| CVE-2019-5140 | HIGH | 8.8 | 2.9% | Feb 25, 2020 | An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version... |
| CVE-2019-5139 | HIGH | 7.1 | 0.3% | Feb 25, 2020 | An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firmw... |
| CVE-2019-5138 | CRITICAL | 9.9 | 5.4% | Feb 25, 2020 | An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A... |
| CVE-2019-5137 | HIGH | 7.5 | 2.3% | Feb 25, 2020 | The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic ... |
| CVE-2019-5136 | HIGH | 8.8 | 2.5% | Feb 25, 2020 | An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware ... |
| CVE-2019-4672 | MEDIUM | 5.3 | 1.4% | Feb 25, 2020 | IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially c... |
| CVE-2019-4557 | HIGH | 7.5 | 0.8% | Feb 25, 2020 | IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an at... |
| CVE-2019-17569 | MEDIUM | 4.8 | 8.9% | Feb 24, 2020 | The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression... |
| CVE-2019-17229 | MEDIUM | 6.1 | 1.4% | Feb 24, 2020 | includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin ... |
| CVE-2019-17228 | MEDIUM | 6.5 | 1.2% | Feb 24, 2020 | includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin ... |
| CVE-2019-12513 | MEDIUM | 6.1 | 0.8% | Feb 24, 2020 | In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname fiel... |
| CVE-2019-12512 | MEDIUM | 6.1 | 0.9% | Feb 24, 2020 | In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, an attacker may execute stored XSS attacks against this device by suppl... |
| CVE-2019-12511 | CRITICAL | 9.8 | 2.3% | Feb 24, 2020 | In NETGEAR Nighthawk X10-R9000 prior to 1.0.4.26, an attacker may execute arbitrary system commands as root by sending a... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now