2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-11125 | — | — | 0.4% | Jun 13, 2019 | Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable ... |
| CVE-2019-11124 | — | — | 0.4% | Jun 13, 2019 | Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escala... |
| CVE-2019-11123 | — | — | 0.4% | Jun 13, 2019 | Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enabl... |
| CVE-2019-0174 | — | — | 0.4% | Jun 13, 2019 | Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical addre... |
| CVE-2019-0157 | — | — | 0.4% | Jun 13, 2019 | Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable... |
| CVE-2019-0136 | — | — | 4.1% | Jun 13, 2019 | Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unaut... |
| CVE-2019-0315 | — | — | 1.4% | Jun 12, 2019 | Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.... |
| CVE-2019-0314 | — | — | 0.8% | Jun 12, 2019 | SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitima... |
| CVE-2019-0312 | — | — | 1.1% | Jun 12, 2019 | Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40,... |
| CVE-2019-0311 | — | — | 0.8% | Jun 12, 2019 | Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not s... |
| CVE-2019-7840 | — | — | 17.2% | Jun 12, 2019 | ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of unt... |
| CVE-2019-7839 | — | — | 44.1% | Jun 12, 2019 | ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vuln... |
| CVE-2019-7838 | — | — | 17.4% | Jun 12, 2019 | ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blackli... |
| CVE-2019-10971 | — | — | 1.1% | Jun 12, 2019 | The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrust... |
| CVE-2019-9676 | — | — | 0.4% | Jun 12, 2019 | Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 201... |
| CVE-2019-3947 | — | — | 1.6% | Jun 12, 2019 | Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can g... |
| CVE-2019-3946 | — | — | 2.3% | Jun 12, 2019 | Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. A... |
| CVE-2019-0308 | — | — | 0.9% | Jun 12, 2019 | An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, ca... |
| CVE-2019-0307 | — | — | 2.1% | Jun 12, 2019 | Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as So... |
| CVE-2019-0306 | — | — | 0.9% | Jun 12, 2019 | SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Plat... |
| CVE-2019-0305 | — | — | 0.9% | Jun 12, 2019 | Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20... |
| CVE-2019-0304 | — | — | 1.6% | Jun 12, 2019 | FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT... |
| CVE-2019-10926 | — | — | 1.5% | Jun 12, 2019 | A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is no... |
| CVE-2019-1036 | — | — | 1.7% | Jun 12, 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2019-1034 | — | — | 4.9% | Jun 12, 2019 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now