2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-6782 | HIGH | 7.5 | 1.8% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befor... |
| CVE-2019-11605 | HIGH | 7.5 | 1.2% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.... |
| CVE-2019-5473 | HIGH | 7.2 | 1.7% | Sep 9, 2019 | An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitL... |
| CVE-2019-16163 | HIGH | 7.5 | 2.8% | Sep 9, 2019 | Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. |
| CVE-2019-16162 | HIGH | 7.5 | 1.8% | Sep 9, 2019 | Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c. |
| CVE-2019-16161 | HIGH | 7.5 | 2.1% | Sep 9, 2019 | Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c. |
| CVE-2019-16159 | HIGH | 7.5 | 3.2% | Sep 9, 2019 | BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon... |
| CVE-2019-12465 | HIGH | 8.1 | 1.2% | Sep 9, 2019 | An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajax_rulesuggest.php file where t... |
| CVE-2019-12464 | HIGH | 7.5 | 2.2% | Sep 9, 2019 | An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /... |
| CVE-2019-12463 | HIGH | 8.8 | 1.4% | Sep 9, 2019 | An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.ph... |
| CVE-2019-10671 | HIGH | 8.8 | 1.3% | Sep 9, 2019 | An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queri... |
| CVE-2019-15895 | HIGH | 7.5 | 1.7% | Sep 9, 2019 | search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes. |
| CVE-2019-15639 | HIGH | 7.5 | 21.9% | Sep 9, 2019 | main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a ... |
| CVE-2019-10669 | HIGH | 7.2 | 80.7% | Sep 9, 2019 | An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/dev... |
| CVE-2019-10666 | HIGH | 8.1 | 1.2% | Sep 9, 2019 | An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the includ... |
| CVE-2019-16144 | HIGH | 7.5 | 1.6% | Sep 9, 2019 | An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and ... |
| CVE-2019-16141 | HIGH | 7.5 | 1.6% | Sep 9, 2019 | An issue was discovered in the once_cell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy. |
| CVE-2019-16137 | HIGH | 7.5 | 1.4% | Sep 9, 2019 | An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishand... |
| CVE-2019-16131 | HIGH | 8.8 | 6.5% | Sep 9, 2019 | framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file fro... |
| CVE-2019-16123 | HIGH | 7.5 | 16.5% | Sep 9, 2019 | In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File D... |
| CVE-2019-16120 | HIGH | 8.8 | 3.2% | Sep 8, 2019 | CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticket... |
| CVE-2019-16115 | HIGH | 7.8 | 1.1% | Sep 8, 2019 | In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used ... |
| CVE-2019-16113 | HIGH | 8.8 | 78.0% | Sep 8, 2019 | Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j... |
| CVE-2019-16096 | HIGH | 7.5 | 2.4% | Sep 8, 2019 | Kilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation involving the number o... |
| CVE-2019-16095 | HIGH | 7.5 | 1.3% | Sep 8, 2019 | Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now