2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-10790 | HIGH | 7.5 | 1.8% | Feb 17, 2020 | taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional pr... |
| CVE-2019-20474 | MEDIUM | 4.3 | 1.4% | Feb 17, 2020 | An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configurat... |
| CVE-2019-18998 | HIGH | 7.1 | 0.8% | Feb 17, 2020 | Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior... |
| CVE-2019-12954 | MEDIUM | 5.4 | 1.4% | Feb 17, 2020 | SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS by authenticated users ... |
| CVE-2019-12825 | MEDIUM | 4.3 | 1.1% | Feb 17, 2020 | Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other w... |
| CVE-2019-20456 | HIGH | 7.8 | 0.7% | Feb 16, 2020 | Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an ... |
| CVE-2019-5187 | HIGH | 8.8 | 3.6% | Feb 14, 2020 | An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of... |
| CVE-2019-4392 | CRITICAL | 9.8 | 1.4% | Feb 14, 2020 | HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get... |
| CVE-2019-15594 | MEDIUM | 4.3 | 0.8% | Feb 14, 2020 | GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via... |
| CVE-2019-15592 | MEDIUM | 4.3 | 1.0% | Feb 14, 2020 | GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge... |
| CVE-2019-13967 | HIGH | 7.5 | 1.3% | Feb 14, 2020 | iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) via many requests to ... |
| CVE-2019-13966 | MEDIUM | 6.1 | 0.8% | Feb 14, 2020 | In iTop through 2.6.0, an XSS payload can be delivered in certain fields (such as icon) of the XML file used to build th... |
| CVE-2019-13965 | MEDIUM | 6.1 | 1.6% | Feb 14, 2020 | Because of a lack of sanitization around error messages, multiple Reflective XSS issues exist in iTop through 2.6.0 via ... |
| CVE-2019-11215 | HIGH | 8.1 | 1.2% | Feb 14, 2020 | In Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of arbitrary code can be acco... |
| CVE-2019-6195 | MEDIUM | 4.8 | 0.6% | Feb 14, 2020 | An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PS... |
| CVE-2019-6194 | MEDIUM | 5.5 | 0.7% | Feb 14, 2020 | An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prio... |
| CVE-2019-6193 | HIGH | 7.5 | 1.0% | Feb 14, 2020 | An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 tha... |
| CVE-2019-6190 | MEDIUM | 5.5 | 0.3% | Feb 14, 2020 | Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Deskto... |
| CVE-2019-20046 | CRITICAL | 9.8 | 2.2% | Feb 14, 2020 | The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and pri... |
| CVE-2019-20045 | HIGH | 7.5 | 1.2% | Feb 14, 2020 | The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and pri... |
| CVE-2019-19879 | HIGH | 7.5 | 1.2% | Feb 14, 2020 | HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2. |
| CVE-2019-19765 | — | — | — | Feb 14, 2020 | Rejected reason: Unused CVE for 2019 |
| CVE-2019-19764 | — | — | — | Feb 14, 2020 | Rejected reason: Unused CVE for 2019 |
| CVE-2019-19763 | — | — | — | Feb 14, 2020 | Rejected reason: Unused CVE for 2019 |
| CVE-2019-19762 | — | — | — | Feb 14, 2020 | Rejected reason: Unused CVE for 2019 |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now