2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19666 | MEDIUM | 4.3 | 0.4% | Feb 10, 2020 | A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can cre... |
| CVE-2019-19661 | MEDIUM | 6.1 | 0.8% | Feb 10, 2020 | A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName... |
| CVE-2019-19664 | HIGH | 7.1 | 0.4% | Feb 10, 2020 | A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerab... |
| CVE-2019-19662 | MEDIUM | 6.5 | 0.4% | Feb 10, 2020 | A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1.... |
| CVE-2019-19665 | MEDIUM | 6.5 | 0.4% | Feb 10, 2020 | A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerab... |
| CVE-2019-19663 | MEDIUM | 6.5 | 0.4% | Feb 10, 2020 | A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attack... |
| CVE-2019-19660 | MEDIUM | 6.5 | 0.4% | Feb 10, 2020 | A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exp... |
| CVE-2019-19659 | HIGH | 8.8 | 0.5% | Feb 10, 2020 | A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By explo... |
| CVE-2019-20451 | CRITICAL | 9.8 | 7.5% | Feb 10, 2020 | The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by upload... |
| CVE-2019-20062 | CRITICAL | 9.8 | 1.6% | Feb 10, 2020 | MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a leaked hash (the hash n... |
| CVE-2019-20061 | HIGH | 7.5 | 0.9% | Feb 10, 2020 | The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this e... |
| CVE-2019-20060 | HIGH | 7.5 | 1.4% | Feb 10, 2020 | MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third ... |
| CVE-2019-20059 | HIGH | 8.8 | 0.9% | Feb 10, 2020 | payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values ... |
| CVE-2019-11485 | LOW | 3.3 | 0.3% | Feb 8, 2020 | Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash hand... |
| CVE-2019-11484 | HIGH | 7.8 | 0.4% | Feb 8, 2020 | Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie. |
| CVE-2019-11483 | LOW | 3.3 | 0.4% | Feb 8, 2020 | Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker ... |
| CVE-2019-11482 | MEDIUM | 4.7 | 0.2% | Feb 8, 2020 | Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core... |
| CVE-2019-11481 | HIGH | 7.8 | 0.4% | Feb 8, 2020 | Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replac... |
| CVE-2019-17136 | HIGH | 7.8 | 5.5% | Feb 8, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0... |
| CVE-2019-17135 | HIGH | 7.8 | 5.2% | Feb 8, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0... |
| CVE-2019-13334 | HIGH | 7.8 | 6.8% | Feb 8, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0... |
| CVE-2019-13333 | HIGH | 7.8 | 6.8% | Feb 8, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0... |
| CVE-2019-19356 | HIGH | 7.5 | 28.0% | Feb 7, 2020 | Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. ... |
| CVE-2019-13163 | MEDIUM | 5.9 | 0.6% | Feb 7, 2020 | The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager... |
| CVE-2019-6466 | — | — | — | Feb 7, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not as... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now