2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-2005 | — | — | 0.6% | Jun 19, 2019 | In onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly granted permission due to a... |
| CVE-2019-2004 | — | — | 0.2% | Jun 19, 2019 | In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized da... |
| CVE-2019-1990 | — | — | 1.4% | Jun 19, 2019 | In ihevcd_fmt_conv_420sp_to_420p of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds c... |
| CVE-2019-1989 | — | — | 1.4% | Jun 19, 2019 | In ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c, there is a possible out of bounds write due to a missing bound... |
| CVE-2019-1985 | — | — | 0.2% | Jun 19, 2019 | In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog ... |
| CVE-2019-9763 | — | — | 1.2% | Jun 19, 2019 | An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' su... |
| CVE-2019-12890 | — | — | 6.2% | Jun 19, 2019 | RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create adm... |
| CVE-2019-11233 | — | — | 1.5% | Jun 19, 2019 | EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sending... |
| CVE-2019-11232 | — | — | 1.5% | Jun 19, 2019 | EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated,... |
| CVE-2019-9701 | — | — | 1.8% | Jun 19, 2019 | DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue th... |
| CVE-2019-6114 | — | — | 2.6% | Jun 19, 2019 | An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an... |
| CVE-2019-12491 | — | — | 1.5% | Jun 19, 2019 | OnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196 allows an attacker to run arbitrary commands with root privileges on serv... |
| CVE-2019-6972 | — | — | 1.1% | Jun 19, 2019 | An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-fo... |
| CVE-2019-6971 | — | — | 13.7% | Jun 19, 2019 | An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packe... |
| CVE-2019-10257 | — | — | 2.4% | Jun 19, 2019 | Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restr... |
| CVE-2019-12436 | — | — | 2.8% | Jun 19, 2019 | Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is re... |
| CVE-2019-12435 | — | — | 2.2% | Jun 19, 2019 | Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is ... |
| CVE-2019-3954 | — | — | 3.9% | Jun 19, 2019 | Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbi... |
| CVE-2019-10085 | — | — | 5.1% | Jun 19, 2019 | In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or e... |
| CVE-2019-3953 | — | — | 4.0% | Jun 18, 2019 | Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbi... |
| CVE-2019-12133 | — | — | 1.8% | Jun 18, 2019 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDR... |
| CVE-2019-12592 | — | — | 1.1% | Jun 18, 2019 | A universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension before 7.11.1 for Chrome all... |
| CVE-2019-12875 | — | — | 1.3% | Jun 18, 2019 | Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --... |
| CVE-2019-12872 | — | — | 1.3% | Jun 18, 2019 | dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view... |
| CVE-2019-7159 | — | — | 1.6% | Jun 18, 2019 | OX App Suite 7.10.1 and earlier allows Information Exposure. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now