2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-9189 | — | — | 11.6% | Jun 5, 2019 | Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when ... |
| CVE-2019-9187 | — | — | 1.7% | Jun 5, 2019 | ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact a... |
| CVE-2019-5394 | — | — | 0.3% | Jun 5, 2019 | The HPE Nonstop Maintenance Entity family of products are vulnerable to local disclosure of information, such as system ... |
| CVE-2019-12276 | — | — | 53.7% | Jun 5, 2019 | A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows... |
| CVE-2019-12196 | — | — | 69.1% | Jun 5, 2019 | A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3... |
| CVE-2019-11988 | — | — | 1.4% | Jun 5, 2019 | A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager (SUM) earlier than version 8.3.5. |
| CVE-2019-11987 | — | — | 0.3% | Jun 5, 2019 | A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of pri... |
| CVE-2019-11226 | — | — | 0.9% | Jun 5, 2019 | CMS Made Simple 2.2.10 has XSS via the m1_name parameter in "Add Article" under Content -> Content Manager -> News. |
| CVE-2019-9642 | — | — | 2.4% | Jun 5, 2019 | An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possib... |
| CVE-2019-9548 | — | — | 1.5% | Jun 5, 2019 | Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control. |
| CVE-2019-12555 | — | — | 1.2% | Jun 5, 2019 | In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the SubStr function (... |
| CVE-2019-12554 | — | — | 1.2% | Jun 5, 2019 | In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function ... |
| CVE-2019-12553 | — | — | 2.4% | Jun 5, 2019 | In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function (... |
| CVE-2019-11983 | — | — | 1.1% | Jun 5, 2019 | A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b for Gen... |
| CVE-2019-11982 | — | — | 2.1% | Jun 5, 2019 | A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than v2.61b fo... |
| CVE-2019-9730 | — | — | 1.0% | Jun 5, 2019 | Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a... |
| CVE-2019-9673 | — | — | 4.0% | Jun 5, 2019 | Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI. |
| CVE-2019-9647 | — | — | 2.3% | Jun 5, 2019 | Gila CMS 1.9.1 has XSS. |
| CVE-2019-12742 | — | — | 1.3% | Jun 5, 2019 | Bludit prior to 3.9.1 allows a non-privileged user to change the password of any account, including admin. This occurs b... |
| CVE-2019-11986 | — | — | 3.6% | Jun 5, 2019 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio... |
| CVE-2019-11985 | — | — | 3.6% | Jun 5, 2019 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than versio... |
| CVE-2019-11984 | — | — | 1.9% | Jun 5, 2019 | A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than... |
| CVE-2019-11980 | — | — | 1.5% | Jun 5, 2019 | A remote code exection vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version... |
| CVE-2019-11979 | — | — | 1.9% | Jun 5, 2019 | A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than... |
| CVE-2019-11978 | — | — | 1.9% | Jun 5, 2019 | A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now