2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20404 | MEDIUM | 4.3 | 1.3% | Feb 6, 2020 | The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determine... |
| CVE-2019-20403 | MEDIUM | 5.3 | 1.5% | Feb 6, 2020 | The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira pro... |
| CVE-2019-20402 | MEDIUM | 4.9 | 0.8% | Feb 6, 2020 | Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Administ... |
| CVE-2019-20401 | MEDIUM | 6.5 | 0.8% | Feb 6, 2020 | Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, w... |
| CVE-2019-20400 | HIGH | 7.8 | 0.4% | Feb 6, 2020 | The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a directo... |
| CVE-2019-20106 | MEDIUM | 4.3 | 1.2% | Feb 6, 2020 | Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and... |
| CVE-2019-20104 | HIGH | 7.5 | 2.4% | Feb 6, 2020 | The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote... |
| CVE-2019-20447 | CRITICAL | 9.8 | 2.0% | Feb 5, 2020 | Jobberbase 2.0 has SQL injection via the PATH_INFO to the jobs-in endpoint. |
| CVE-2019-20173 | MEDIUM | 6.1 | 2.5% | Feb 5, 2020 | The Auth0 wp-auth0 plugin 3.11.x before 3.11.3 for WordPress allows XSS via a wle parameter associated with wp-login.php... |
| CVE-2019-15253 | MEDIUM | 4.8 | 3.1% | Feb 5, 2020 | A vulnerability in the web-based management interface of Cisco Digital Network Architecture (DNA) Center could allow an ... |
| CVE-2019-15126 | LOW | 3.1 | 7.7% | Feb 5, 2020 | An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal ... |
| CVE-2019-12180 | HIGH | 7.8 | 4.6% | Feb 5, 2020 | An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, th... |
| CVE-2019-11516 | HIGH | 8.1 | 0.9% | Feb 5, 2020 | An issue was discovered in the Bluetooth component of the Cypress (formerly owned by Broadcom) Wireless IoT codebase. Ex... |
| CVE-2019-4670 | MEDIUM | 6.5 | 1.8% | Feb 5, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information ca... |
| CVE-2019-4616 | LOW | 3.5 | 0.3% | Feb 5, 2020 | IBM Cloud Automation Manager 3.2.1.0 does not set the secure attribute on authorization tokens or session cookies. Attac... |
| CVE-2019-4613 | HIGH | 8.8 | 0.5% | Feb 5, 2020 | IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute maliciou... |
| CVE-2019-16204 | HIGH | 7.5 | 1.5% | Feb 5, 2020 | Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets ... |
| CVE-2019-16203 | HIGH | 7.5 | 1.4% | Feb 5, 2020 | Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these ... |
| CVE-2019-12528 | HIGH | 7.5 | 10.5% | Feb 4, 2020 | An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive informat... |
| CVE-2019-10788 | CRITICAL | 9.8 | 2.4% | Feb 4, 2020 | im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible ... |
| CVE-2019-10787 | CRITICAL | 9.8 | 3.8% | Feb 4, 2020 | im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument ... |
| CVE-2019-10786 | CRITICAL | 9.8 | 2.1% | Feb 4, 2020 | network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync()" argument. |
| CVE-2019-15624 | MEDIUM | 4.9 | 1.5% | Feb 4, 2020 | Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders. |
| CVE-2019-15623 | MEDIUM | 5.3 | 1.9% | Feb 4, 2020 | Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nex... |
| CVE-2019-15622 | LOW | 2.4 | 0.5% | Feb 4, 2020 | Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now