2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-12510CRITICAL9.1In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's "NETGE...
CVE-2019-10799HIGH8.2compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "d...
CVE-2019-10798MEDIUM5.3rdf-graph-array through 0.3.0-rc6 manipulation of JavaScript objects resutling in Prototype Pollution. The rdf.Graph.pro...
CVE-2019-10796CRITICAL9.8rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.j...
CVE-2019-4745MEDIUM4.3IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated ...
CVE-2019-4703MEDIUM5.3IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacke...
CVE-2019-4595MEDIUM6.1IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote attacker to conduct phishing a...
CVE-2019-20481CRITICAL9.8In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old passwo...
CVE-2019-20480HIGH8.8In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious...
CVE-2019-18183CRITICAL9.8pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. Thi...
CVE-2019-18182CRITICAL9.8pacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the download_with_xfercommand() function. Th...
CVE-2019-20044HIGH7.8In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh f...
CVE-2019-15299HIGH8.8An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the conta...
CVE-2019-3670MEDIUM6.1Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote ...
CVE-2019-18846MEDIUM5OX App Suite through 7.10.2 allows SSRF.
CVE-2019-19866HIGH7.5Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attacker...
CVE-2019-19865MEDIUM6.1Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attack...
CVE-2019-19452HIGH7.8A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers (...
CVE-2019-19694MEDIUM4.7The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (...
CVE-2019-14688HIGH7Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an instal...
CVE-2019-16302HIGH7.5An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.e...
CVE-2019-16301HIGH7.5An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.ono...
CVE-2019-16300HIGH7.5An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject...
CVE-2019-16299HIGH7.5An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobil...
CVE-2019-16298HIGH7.5An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway applicati...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now