2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15813 | HIGH | 8.8 | 33.2% | Sep 4, 2019 | Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb... |
| CVE-2019-15903 | HIGH | 7.5 | 6.6% | Sep 4, 2019 | In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too... |
| CVE-2019-5479 | HIGH | 7.5 | 1.3% | Sep 3, 2019 | An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production cod... |
| CVE-2019-6179 | HIGH | 7.5 | 1.4% | Sep 3, 2019 | An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to vers... |
| CVE-2019-14817 | HIGH | 7.8 | 2.0% | Sep 3, 2019 | A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not prop... |
| CVE-2019-14811 | HIGH | 7.8 | 3.8% | Sep 3, 2019 | A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properl... |
| CVE-2019-13156 | HIGH | 7.5 | 1.0% | Sep 3, 2019 | NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of... |
| CVE-2019-15858 | HIGH | 8.8 | 20.8% | Sep 3, 2019 | admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthentica... |
| CVE-2019-15847 | HIGH | 7.5 | 3.2% | Sep 2, 2019 | The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_dar... |
| CVE-2019-2390 | HIGH | 7.8 | 1.0% | Aug 30, 2019 | An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location ma... |
| CVE-2019-5612 | HIGH | 7.5 | 0.9% | Aug 30, 2019 | In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE be... |
| CVE-2019-5611 | HIGH | 7.5 | 4.4% | Aug 30, 2019 | In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE be... |
| CVE-2019-5610 | HIGH | 7.5 | 3.8% | Aug 30, 2019 | In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE bef... |
| CVE-2019-5609 | HIGH | 7.5 | 1.3% | Aug 30, 2019 | In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE bef... |
| CVE-2019-1968 | HIGH | 7.5 | 1.8% | Aug 30, 2019 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a... |
| CVE-2019-1967 | HIGH | 7.5 | 2.0% | Aug 30, 2019 | A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remot... |
| CVE-2019-1966 | HIGH | 7.8 | 0.4% | Aug 30, 2019 | A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Intercon... |
| CVE-2019-12402 | HIGH | 7.5 | 16.2% | Aug 30, 2019 | The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop w... |
| CVE-2019-14970 | HIGH | 7.8 | 1.9% | Aug 29, 2019 | A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-ba... |
| CVE-2019-14778 | HIGH | 7.8 | 1.5% | Aug 29, 2019 | The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-... |
| CVE-2019-14777 | HIGH | 7.8 | 1.5% | Aug 29, 2019 | The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
| CVE-2019-14776 | HIGH | 7.8 | 1.5% | Aug 29, 2019 | A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafte... |
| CVE-2019-14533 | HIGH | 7.8 | 1.5% | Aug 29, 2019 | The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
| CVE-2019-13608 | HIGH | 7.5 | 28.0% | Aug 29, 2019 | Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE at... |
| CVE-2019-14535 | HIGH | 7.8 | 1.5% | Aug 29, 2019 | A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a re... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now