2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14498 | HIGH | 7.8 | 1.5% | Aug 29, 2019 | A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, ... |
| CVE-2019-14438 | HIGH | 7.8 | 1.8% | Aug 29, 2019 | A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows ... |
| CVE-2019-14437 | HIGH | 7.8 | 1.5% | Aug 29, 2019 | The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds ... |
| CVE-2019-7307 | HIGH | 7 | 0.3% | Aug 29, 2019 | Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubu... |
| CVE-2019-13408 | HIGH | 7.5 | 1.9% | Aug 29, 2019 | A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download... |
| CVE-2019-11248 | HIGH | 8.2 | 61.1% | Aug 29, 2019 | The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is e... |
| CVE-2019-11247 | HIGH | 8.1 | 2.1% | Aug 29, 2019 | The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if ... |
| CVE-2019-11060 | HIGH | 7.5 | 3.0% | Aug 29, 2019 | The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Se... |
| CVE-2019-15752 | HIGH | 7.8 | 29.6% | Aug 28, 2019 | Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c... |
| CVE-2019-1965 | HIGH | 7.7 | 1.5% | Aug 28, 2019 | A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, rem... |
| CVE-2019-1964 | HIGH | 8.6 | 1.9% | Aug 28, 2019 | A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker t... |
| CVE-2019-1963 | HIGH | 7.7 | 1.6% | Aug 28, 2019 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco... |
| CVE-2019-1962 | HIGH | 8.6 | 1.9% | Aug 28, 2019 | A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote at... |
| CVE-2019-10390 | HIGH | 8.8 | 1.7% | Aug 28, 2019 | A sandbox bypass vulnerability in Jenkins Splunk Plugin 1.7.4 and earlier allowed attackers with Overall/Read permission... |
| CVE-2019-10384 | HIGH | 8.8 | 1.6% | Aug 28, 2019 | Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session... |
| CVE-2019-15702 | HIGH | 7.5 | 1.4% | Aug 27, 2019 | In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all input... |
| CVE-2019-13265 | HIGH | 8.8 | 1.2% | Aug 27, 2019 | D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are e... |
| CVE-2019-13264 | HIGH | 8.8 | 1.2% | Aug 27, 2019 | D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are e... |
| CVE-2019-13263 | HIGH | 8.8 | 1.2% | Aug 27, 2019 | D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are e... |
| CVE-2019-11457 | HIGH | 8.8 | 1.1% | Aug 27, 2019 | Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/c... |
| CVE-2019-8460 | HIGH | 7.5 | 2.2% | Aug 26, 2019 | OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to ... |
| CVE-2019-15544 | HIGH | 7.5 | 3.8% | Aug 26, 2019 | An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve c... |
| CVE-2019-12532 | HIGH | 7.8 | 0.4% | Aug 26, 2019 | Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of... |
| CVE-2019-15637 | HIGH | 8.1 | 14.3% | Aug 26, 2019 | Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to informat... |
| CVE-2019-4513 | HIGH | 8.2 | 2.8% | Aug 26, 2019 | IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now