2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-19824HIGH8.8On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCm...
CVE-2019-19823HIGH7.5A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext admin...
CVE-2019-19822HIGH7.5A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attacker...
CVE-2019-17099HIGH7.8An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions ...
CVE-2019-17095CRITICAL9.8A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 an...
CVE-2019-17094HIGH7.8A Stack-based Buffer Overflow vulnerability in libbelkin_api.so component of Belkin WeMo Insight Switch firmware allows ...
CVE-2019-19825CRITICAL9.8On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"}...
CVE-2019-17096CRITICAL9.8A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_ima...
CVE-2019-17190HIGH7.8A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an ...
CVE-2019-20433CRITICAL9.1libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encod...
CVE-2019-17103MEDIUM5.5An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker t...
CVE-2019-17102HIGH8.1An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. ...
CVE-2019-17100MEDIUM6.5An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attack...
CVE-2019-6036MEDIUM6.1Cross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series) allows remote attackers t...
CVE-2019-20432HIGH7.5In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validat...
CVE-2019-20431HIGH7.5In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic...
CVE-2019-20430HIGH7.5In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to...
CVE-2019-20429HIGH7.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcou...
CVE-2019-20428HIGH7.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of valida...
CVE-2019-20427CRITICAL9.8In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code exe...
CVE-2019-20426HIGH7.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of vali...
CVE-2019-20425HIGH7.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of vali...
CVE-2019-20424HIGH7.5In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic du...
CVE-2019-20423HIGH7.5In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation...
CVE-2019-20422MEDIUM5.5In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now