2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-16297 | HIGH | 7.5 | 1.7% | Feb 20, 2020 | An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4... |
| CVE-2019-11189 | HIGH | 7.5 | 1.1% | Feb 20, 2020 | Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) i... |
| CVE-2019-4752 | HIGH | 8.8 | 1.3% | Feb 20, 2020 | IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vu... |
| CVE-2019-4583 | MEDIUM | 4.3 | 1.0% | Feb 20, 2020 | IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to obtain sensitive information from ... |
| CVE-2019-19741 | HIGH | 7.8 | 0.7% | Feb 20, 2020 | Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipul... |
| CVE-2019-20479 | MEDIUM | 6.1 | 1.6% | Feb 20, 2020 | A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backsl... |
| CVE-2019-1950 | HIGH | 8.4 | 0.3% | Feb 19, 2020 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized acce... |
| CVE-2019-17333 | MEDIUM | 5.4 | 0.7% | Feb 19, 2020 | The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authentic... |
| CVE-2019-10797 | MEDIUM | 6.5 | 1.2% | Feb 19, 2020 | Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being ... |
| CVE-2019-12437 | HIGH | 8.8 | 0.7% | Feb 19, 2020 | In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL... |
| CVE-2019-12246 | MEDIUM | 4.3 | 0.7% | Feb 19, 2020 | SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools. |
| CVE-2019-4640 | CRITICAL | 9.8 | 0.5% | Feb 19, 2020 | IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the or... |
| CVE-2019-4457 | MEDIUM | 6.5 | 0.9% | Feb 19, 2020 | IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obta... |
| CVE-2019-4429 | MEDIUM | 5.4 | 0.6% | Feb 19, 2020 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to em... |
| CVE-2019-20478 | CRITICAL | 9.8 | 6.6% | Feb 19, 2020 | In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an... |
| CVE-2019-20477 | CRITICAL | 9.8 | 5.0% | Feb 19, 2020 | PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserializa... |
| CVE-2019-10791 | CRITICAL | 9.8 | 2.0% | Feb 18, 2020 | promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and opti... |
| CVE-2019-5613 | CRITICAL | 9.8 | 0.6% | Feb 18, 2020 | In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an ... |
| CVE-2019-18352 | HIGH | 8.2 | 0.4% | Feb 18, 2020 | Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices befo... |
| CVE-2019-15875 | LOW | 3.3 | 0.3% | Feb 18, 2020 | In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-S... |
| CVE-2019-10795 | MEDIUM | 6.3 | 1.1% | Feb 18, 2020 | undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying ... |
| CVE-2019-10794 | MEDIUM | 6.3 | 0.7% | Feb 18, 2020 | All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or ... |
| CVE-2019-10793 | MEDIUM | 6.3 | 1.1% | Feb 18, 2020 | dot-object before 2.1.3 is vulnerable to Prototype Pollution. The set function could be tricked into adding or modifying... |
| CVE-2019-10792 | MEDIUM | 6.3 | 1.0% | Feb 18, 2020 | bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifyin... |
| CVE-2019-19325 | MEDIUM | 6.1 | 0.7% | Feb 17, 2020 | SilverStripe through 4.4.x before 4.4.5 and 4.5.x before 4.5.2 allows Reflected XSS on the login form and custom forms. ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now