2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19758 | MEDIUM | 6.1 | 0.9% | Feb 14, 2020 | A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior co... |
| CVE-2019-19757 | MEDIUM | 5.4 | 0.5% | Feb 14, 2020 | An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) base... |
| CVE-2019-20455 | MEDIUM | 5.9 | 1.0% | Feb 14, 2020 | Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations. |
| CVE-2019-20454 | HIGH | 7.5 | 1.6% | Feb 14, 2020 | An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match speciall... |
| CVE-2019-3998 | MEDIUM | 5.5 | 0.4% | Feb 13, 2020 | Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated ... |
| CVE-2019-14598 | MEDIUM | 6.7 | 0.5% | Feb 13, 2020 | Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 t... |
| CVE-2019-10785 | MEDIUM | 6.1 | 1.8% | Feb 13, 2020 | dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.... |
| CVE-2019-4666 | LOW | 2.3 | 0.3% | Feb 13, 2020 | IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain sensitive information ... |
| CVE-2019-4592 | HIGH | 7.5 | 1.3% | Feb 13, 2020 | IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operati... |
| CVE-2019-18791 | MEDIUM | 5.4 | 0.5% | Feb 13, 2020 | Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web ... |
| CVE-2019-2200 | HIGH | 7.3 | 0.2% | Feb 13, 2020 | In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permiss... |
| CVE-2019-14652 | MEDIUM | 6.1 | 1.0% | Feb 13, 2020 | explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certa... |
| CVE-2019-5322 | HIGH | 7.5 | 1.2% | Feb 13, 2020 | A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 381... |
| CVE-2019-18915 | HIGH | 7.8 | 1.5% | Feb 13, 2020 | A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version... |
| CVE-2019-19192 | MEDIUM | 6.5 | 1.0% | Feb 12, 2020 | The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not pro... |
| CVE-2019-17519 | HIGH | 8.8 | 1.2% | Feb 12, 2020 | The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link L... |
| CVE-2019-16336 | MEDIUM | 6.5 | 1.5% | Feb 12, 2020 | The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames w... |
| CVE-2019-11867 | MEDIUM | 5.5 | 0.3% | Feb 12, 2020 | Realtek NDIS driver rt640x64.sys, file version 10.1.505.2015, fails to do any size checking on an input buffer from user... |
| CVE-2019-4741 | MEDIUM | 5.3 | 0.9% | Feb 12, 2020 | IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attac... |
| CVE-2019-4431 | MEDIUM | 5.4 | 0.6% | Feb 12, 2020 | IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2019-4427 | HIGH | 7.5 | 0.5% | Feb 12, 2020 | IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to ex... |
| CVE-2019-19921 | HIGH | 7 | 0.5% | Feb 12, 2020 | runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_... |
| CVE-2019-19196 | MEDIUM | 6.5 | 1.4% | Feb 12, 2020 | The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before No... |
| CVE-2019-19194 | HIGH | 8.8 | 1.0% | Feb 12, 2020 | The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before No... |
| CVE-2019-20100 | MEDIUM | 4.7 | 1.0% | Feb 12, 2020 | The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are af... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now