2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-12548 | — | — | 3.0% | Jun 3, 2019 | Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the lo... |
| CVE-2019-12097 | — | — | 0.6% | Jun 3, 2019 | Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to co... |
| CVE-2019-11368 | — | — | 1.6% | Jun 3, 2019 | Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter. |
| CVE-2019-11367 | — | — | 2.8% | Jun 3, 2019 | An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provi... |
| CVE-2019-11185 | — | — | 4.3% | Jun 3, 2019 | The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This r... |
| CVE-2019-10883 | — | — | 65.5% | Jun 3, 2019 | Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection. |
| CVE-2019-10009 | — | — | 11.5% | Jun 3, 2019 | A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated use... |
| CVE-2019-6588 | — | — | 2.3% | Jun 3, 2019 | In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsani... |
| CVE-2019-12377 | — | — | 5.5% | Jun 3, 2019 | A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.... |
| CVE-2019-12376 | — | — | 0.6% | Jun 3, 2019 | Use of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Up... |
| CVE-2019-12375 | — | — | 1.1% | Jun 3, 2019 | Open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to... |
| CVE-2019-12374 | — | — | 2.6% | Jun 3, 2019 | A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service ... |
| CVE-2019-12373 | — | — | 1.0% | Jun 3, 2019 | Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 ... |
| CVE-2019-12177 | — | — | 1.4% | Jun 3, 2019 | Privilege escalation due to insecure directory permissions affecting ViveportDesktopService in HTC VIVEPORT before 1.0.0... |
| CVE-2019-12176 | — | — | 0.3% | Jun 3, 2019 | Privilege escalation in the "HTC Account Service" and "ViveportDesktopService" in HTC VIVEPORT before 1.0.0.36 allows lo... |
| CVE-2019-11370 | — | — | 4.0% | Jun 3, 2019 | Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" f... |
| CVE-2019-11369 | — | — | 7.1% | Jun 3, 2019 | An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext pass... |
| CVE-2019-3567 | — | — | 1.7% | Jun 3, 2019 | In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard l... |
| CVE-2019-12310 | — | — | 3.3% | Jun 3, 2019 | ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability... |
| CVE-2019-9883 | — | — | 0.7% | Jun 3, 2019 | Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of s... |
| CVE-2019-9882 | — | — | 0.7% | Jun 3, 2019 | Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email so... |
| CVE-2019-12593 | — | — | 41.0% | Jun 3, 2019 | IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index... |
| CVE-2019-12308 | — | — | 2.6% | Jun 3, 2019 | An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL... |
| CVE-2019-11646 | — | — | 2.5% | Jun 3, 2019 | Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, version... |
| CVE-2019-3397 | — | — | 5.1% | Jun 3, 2019 | Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 (the fixed version for 5.1... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now