2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13028 | — | — | 3.7% | Jun 28, 2019 | An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.... |
| CVE-2019-9843 | — | — | 1.5% | Jun 28, 2019 | In DiffPlug Spotless before 1.20.0 (library and Maven plugin) and before 3.20.0 (Gradle plugin), the XML parser would re... |
| CVE-2019-12932 | — | — | 0.8% | Jun 28, 2019 | A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result in the autocomplete sear... |
| CVE-2019-4369 | — | — | — | Jun 28, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-9846 | — | — | 1.7% | Jun 28, 2019 | RockOA 1.8.7 allows remote attackers to obtain sensitive information because the webmain/webmainAction.php publictreesto... |
| CVE-2019-13012 | — | — | 3.2% | Jun 28, 2019 | The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_w... |
| CVE-2019-12997 | — | — | 2.1% | Jun 28, 2019 | In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment... |
| CVE-2019-12995 | — | — | 2.2% | Jun 28, 2019 | Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is rel... |
| CVE-2019-5785 | — | — | 1.2% | Jun 27, 2019 | Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an ... |
| CVE-2019-5784 | — | — | 1.6% | Jun 27, 2019 | Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentiall... |
| CVE-2019-12581 | — | — | 6.4% | Jun 27, 2019 | A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, ... |
| CVE-2019-12887 | — | — | 1.2% | Jun 27, 2019 | KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2). |
| CVE-2019-12583 | — | — | 43.9% | Jun 27, 2019 | Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attack... |
| CVE-2019-9039 | — | — | 2.7% | Jun 26, 2019 | In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additio... |
| CVE-2019-12984 | — | — | 2.3% | Jun 26, 2019 | A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux ... |
| CVE-2019-12983 | — | — | — | Jun 26, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11884. Reason: This candidate is a reservation d... |
| CVE-2019-12978 | — | — | 1.9% | Jun 26, 2019 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c. |
| CVE-2019-12977 | — | — | 1.9% | Jun 26, 2019 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c. |
| CVE-2019-12974 | — | — | 2.3% | Jun 26, 2019 | A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.... |
| CVE-2019-11583 | — | — | 1.5% | Jun 26, 2019 | The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via de... |
| CVE-2019-12968 | — | — | 2.6% | Jun 26, 2019 | A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Dooms... |
| CVE-2019-12966 | — | — | 2.4% | Jun 26, 2019 | FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a":... |
| CVE-2019-12888 | — | — | — | Jun 26, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-12887. Reason: This candidate is a reservation d... |
| CVE-2019-3961 | — | — | 1.5% | Jun 25, 2019 | Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user... |
| CVE-2019-12280 | — | — | 2.1% | Jun 25, 2019 | PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now