2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-4633 | MEDIUM | 4.3 | 0.9% | Jan 28, 2020 | IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS... |
| CVE-2019-4632 | MEDIUM | 6.1 | 0.7% | Jan 28, 2020 | IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... |
| CVE-2019-4631 | MEDIUM | 6.1 | 0.8% | Jan 28, 2020 | IBM Security Secret Server 10.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack... |
| CVE-2019-4620 | HIGH | 7.8 | 0.4% | Jan 28, 2020 | IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validat... |
| CVE-2019-4614 | MEDIUM | 6.5 | 1.5% | Jan 28, 2020 | IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service... |
| CVE-2019-4568 | MEDIUM | 5.9 | 1.3% | Jan 28, 2020 | IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause... |
| CVE-2019-17338 | MEDIUM | 5.4 | 0.6% | Jan 28, 2020 | The user interface component of TIBCO Software Inc.'s TIBCO Patterns - Search contains multiple vulnerabilities that the... |
| CVE-2019-5474 | MEDIUM | 6.5 | 1.1% | Jan 28, 2020 | An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval... |
| CVE-2019-5472 | HIGH | 7.5 | 1.9% | Jan 28, 2020 | An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and mai... |
| CVE-2019-5470 | HIGH | 7.5 | 1.6% | Jan 28, 2020 | An information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6 in the security dashboa... |
| CVE-2019-5468 | HIGH | 8.8 | 2.1% | Jan 28, 2020 | An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash ... |
| CVE-2019-5466 | MEDIUM | 4.3 | 1.0% | Jan 28, 2020 | An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names. |
| CVE-2019-5465 | MEDIUM | 4.3 | 1.1% | Jan 28, 2020 | An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which cou... |
| CVE-2019-5464 | CRITICAL | 9.8 | 2.8% | Jan 28, 2020 | A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which coul... |
| CVE-2019-5462 | HIGH | 8.8 | 2.5% | Jan 28, 2020 | A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once owner... |
| CVE-2019-15607 | MEDIUM | 5.4 | 0.6% | Jan 28, 2020 | A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wirin... |
| CVE-2019-15590 | HIGH | 7.5 | 1.1% | Jan 28, 2020 | An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edi... |
| CVE-2019-15586 | MEDIUM | 6.1 | 0.8% | Jan 28, 2020 | A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin. |
| CVE-2019-15585 | CRITICAL | 9.8 | 1.6% | Jan 28, 2020 | Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edi... |
| CVE-2019-15583 | HIGH | 7.5 | 1.4% | Jan 28, 2020 | An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise E... |
| CVE-2019-15582 | MEDIUM | 5.3 | 0.9% | Jan 28, 2020 | An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE... |
| CVE-2019-15581 | MEDIUM | 5.3 | 1.0% | Jan 28, 2020 | An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that a... |
| CVE-2019-15579 | MEDIUM | 5.3 | 1.0% | Jan 28, 2020 | An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise E... |
| CVE-2019-15578 | MEDIUM | 5.3 | 1.0% | Jan 28, 2020 | An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise E... |
| CVE-2019-20439 | MEDIUM | 4.8 | 1.0% | Jan 28, 2020 | An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has be... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now