2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15621 | MEDIUM | 6.5 | 1.1% | Feb 4, 2020 | Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions... |
| CVE-2019-15620 | LOW | 2.7 | 0.8% | Feb 4, 2020 | Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked th... |
| CVE-2019-15619 | MEDIUM | 4.8 | 0.8% | Feb 4, 2020 | Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0... |
| CVE-2019-15618 | MEDIUM | 4.8 | 0.7% | Feb 4, 2020 | Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a mal... |
| CVE-2019-15617 | MEDIUM | 5.4 | 0.6% | Feb 4, 2020 | A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login. |
| CVE-2019-15616 | MEDIUM | 4.3 | 0.8% | Feb 4, 2020 | Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long. |
| CVE-2019-15615 | MEDIUM | 6.1 | 0.4% | Feb 4, 2020 | A wrong check for the system time in the Android App 3.9.0 causes a bypass of the lock protection when changing the time... |
| CVE-2019-15614 | MEDIUM | 5.4 | 0.8% | Feb 4, 2020 | Missing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files. |
| CVE-2019-15613 | HIGH | 8 | 1.1% | Feb 4, 2020 | A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking... |
| CVE-2019-15612 | MEDIUM | 5.9 | 0.3% | Feb 4, 2020 | A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is ... |
| CVE-2019-15611 | MEDIUM | 4.9 | 1.1% | Feb 4, 2020 | Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextclou... |
| CVE-2019-15610 | MEDIUM | 4.3 | 0.8% | Feb 4, 2020 | Improper authorization in the Circles app 0.17.7 causes retaining access when an email address was removed from a circle... |
| CVE-2019-10784 | CRITICAL | 9.6 | 3.6% | Feb 4, 2020 | phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from t... |
| CVE-2019-4675 | CRITICAL | 9.8 | 1.3% | Feb 4, 2020 | IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it u... |
| CVE-2019-4674 | MEDIUM | 4.9 | 1.9% | Feb 4, 2020 | IBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the system. An attacker cou... |
| CVE-2019-4562 | MEDIUM | 5.3 | 1.0% | Feb 4, 2020 | IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if una... |
| CVE-2019-4551 | MEDIUM | 5.3 | 1.3% | Feb 4, 2020 | IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality al... |
| CVE-2019-4550 | MEDIUM | 5.3 | 1.1% | Feb 4, 2020 | IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM ... |
| CVE-2019-4548 | MEDIUM | 6.1 | 0.9% | Feb 4, 2020 | IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persua... |
| CVE-2019-4541 | HIGH | 7.2 | 1.3% | Feb 4, 2020 | IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass a... |
| CVE-2019-4540 | HIGH | 7.5 | 0.8% | Feb 4, 2020 | IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to d... |
| CVE-2019-4451 | MEDIUM | 5.4 | 0.6% | Feb 4, 2020 | IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi... |
| CVE-2019-19273 | HIGH | 7.8 | 0.2% | Feb 4, 2020 | On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL... |
| CVE-2019-9674 | HIGH | 7.5 | 5.5% | Feb 4, 2020 | Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a... |
| CVE-2019-19968 | MEDIUM | 5.4 | 0.8% | Feb 4, 2020 | PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Buil... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now