2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-16510 | HIGH | 7.5 | 1.4% | Sep 19, 2019 | libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrate... |
| CVE-2019-16412 | HIGH | 7.5 | 1.4% | Sep 19, 2019 | In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value. (Pro... |
| CVE-2019-15001 | HIGH | 7.2 | 11.4% | Sep 19, 2019 | The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 bef... |
| CVE-2019-14994 | HIGH | 7.5 | 5.1% | Sep 19, 2019 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.1... |
| CVE-2019-6010 | HIGH | 7.8 | 1.7% | Sep 19, 2019 | Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause... |
| CVE-2019-15943 | HIGH | 8.8 | 8.7% | Sep 19, 2019 | vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or de... |
| CVE-2019-16413 | HIGH | 7.5 | 2.9% | Sep 19, 2019 | An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, whi... |
| CVE-2019-13556 | HIGH | 8.8 | 2.1% | Sep 18, 2019 | In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of prop... |
| CVE-2019-11661 | HIGH | 8.3 | 1.0% | Sep 18, 2019 | Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34... |
| CVE-2019-5534 | HIGH | 7.7 | 1.6% | Sep 18, 2019 | VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disc... |
| CVE-2019-5532 | HIGH | 7.7 | 1.9% | Sep 18, 2019 | VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disc... |
| CVE-2019-5042 | HIGH | 8.8 | 2.1% | Sep 18, 2019 | An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19... |
| CVE-2019-13552 | HIGH | 8.8 | 2.7% | Sep 18, 2019 | In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validat... |
| CVE-2019-9679 | HIGH | 8.8 | 0.9% | Sep 18, 2019 | Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after... |
| CVE-2019-9678 | HIGH | 7.5 | 1.0% | Sep 18, 2019 | Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crash... |
| CVE-2019-14458 | HIGH | 7.5 | 1.9% | Sep 18, 2019 | VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header. |
| CVE-2019-14252 | HIGH | 7.2 | 1.5% | Sep 18, 2019 | An issue was discovered in the secure portal in Publisure 2.1.2. Once successfully authenticated as an administrator, on... |
| CVE-2019-15843 | HIGH | 7.4 | 0.8% | Sep 18, 2019 | A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition in... |
| CVE-2019-16403 | HIGH | 8.8 | 1.4% | Sep 18, 2019 | In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, o... |
| CVE-2019-16396 | HIGH | 7.8 | 1.1% | Sep 17, 2019 | GnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y via crafted COBOL source ... |
| CVE-2019-16395 | HIGH | 7.8 | 1.0% | Sep 17, 2019 | GnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via crafted COBOL source code. |
| CVE-2019-6839 | HIGH | 8.8 | 1.1% | Sep 17, 2019 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.mot... |
| CVE-2019-6836 | HIGH | 7.5 | 1.3% | Sep 17, 2019 | A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-... |
| CVE-2019-6832 | HIGH | 8.3 | 1.5% | Sep 17, 2019 | A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions ... |
| CVE-2019-6831 | HIGH | 8.6 | 1.4% | Sep 17, 2019 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RT... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now