2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-1033 | — | — | 1.7% | Jun 12, 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2019-1032 | — | — | 1.7% | Jun 12, 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2019-1031 | — | — | 1.7% | Jun 12, 2019 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall... |
| CVE-2019-1029 | — | — | 5.3% | Jun 12, 2019 | A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability... |
| CVE-2019-0996 | — | — | 1.6% | Jun 12, 2019 | A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, re... |
| CVE-2019-0943 | — | — | 2.4% | Jun 12, 2019 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A... |
| CVE-2019-12795 | — | — | 0.4% | Jun 11, 2019 | daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a priv... |
| CVE-2019-12149 | — | — | 1.4% | Jun 11, 2019 | SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x befor... |
| CVE-2019-0196 | — | — | 19.3% | Jun 11, 2019 | A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handlin... |
| CVE-2019-12154 | — | — | 2.3% | Jun 11, 2019 | XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML conte... |
| CVE-2019-12153 | — | — | 1.7% | Jun 11, 2019 | Lack of validation in the HTML parser in RealObjects PDFreactor before 10.1.10722 leads to SSRF, allowing attackers to a... |
| CVE-2019-12146 | — | — | 4.0% | Jun 11, 2019 | A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Att... |
| CVE-2019-12145 | — | — | 4.7% | Jun 11, 2019 | A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An ... |
| CVE-2019-12144 | — | — | 2.9% | Jun 11, 2019 | An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the abi... |
| CVE-2019-12143 | — | — | 2.0% | Jun 11, 2019 | A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An ... |
| CVE-2019-0220 | — | — | 17.9% | Jun 11, 2019 | A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multi... |
| CVE-2019-12794 | — | — | 0.9% | Jun 11, 2019 | An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins (organization admin... |
| CVE-2019-10338 | — | — | 1.0% | Jun 11, 2019 | A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguratio... |
| CVE-2019-10337 | — | — | 2.0% | Jun 11, 2019 | An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to con... |
| CVE-2019-10336 | — | — | 1.4% | Jun 11, 2019 | A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able t... |
| CVE-2019-10335 | — | — | 1.1% | Jun 11, 2019 | A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to c... |
| CVE-2019-10334 | — | — | 1.3% | Jun 11, 2019 | Jenkins ElectricFlow Plugin 1.1.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master... |
| CVE-2019-10331 | — | — | 1.1% | Jun 11, 2019 | A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConne... |
| CVE-2019-10226 | — | — | 4.7% | Jun 10, 2019 | HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to th... |
| CVE-2019-11881 | — | — | 2.3% | Jun 10, 2019 | A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to d... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now