2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25045 | HIGH | 7.8 | 0.5% | Jun 7, 2021 | An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_s... |
| CVE-2019-14584 | HIGH | 7.8 | 0.3% | Jun 3, 2021 | Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege... |
| CVE-2019-4730 | HIGH | 7.1 | 2.0% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML da... |
| CVE-2019-4724 | HIGH | 7.5 | 2.4% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorre... |
| CVE-2019-4723 | HIGH | 7.5 | 2.4% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorre... |
| CVE-2019-4588 | HIGH | 7.8 | 0.3% | May 26, 2021 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us... |
| CVE-2019-14836 | HIGH | 8.8 | 0.6% | May 26, 2021 | A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An at... |
| CVE-2019-25044 | HIGH | 7.8 | 0.6% | May 14, 2021 | The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the... |
| CVE-2019-25041 | HIGH | 7.5 | 2.1% | Apr 27, 2021 | Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that... |
| CVE-2019-25040 | HIGH | 7.5 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that thi... |
| CVE-2019-25037 | HIGH | 7.5 | 2.1% | Apr 27, 2021 | Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: Th... |
| CVE-2019-25036 | HIGH | 7.5 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that th... |
| CVE-2019-15059 | HIGH | 7.5 | 1.0% | Apr 12, 2021 | In Liberty lisPBX 2.0-4, configuration backup files can be retrieved remotely from /backup/lispbx-CONF-YYYY-MM-DD.tar or... |
| CVE-2019-20466 | HIGH | 7.8 | 0.3% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A local attacker with the "... |
| CVE-2019-20465 | HIGH | 7.5 | 1.5% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible (using TELNE... |
| CVE-2019-20464 | HIGH | 7.5 | 1.7% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile applic... |
| CVE-2019-20463 | HIGH | 7.5 | 1.7% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A crash and reboot can be t... |
| CVE-2019-19354 | HIGH | 7.8 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in ... |
| CVE-2019-19353 | HIGH | 7 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Re... |
| CVE-2019-19352 | HIGH | 7 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in ... |
| CVE-2019-19350 | HIGH | 7.8 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as ship... |
| CVE-2019-19349 | HIGH | 7.8 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-me... |
| CVE-2019-19343 | HIGH | 7.5 | 1.6% | Mar 23, 2021 | A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in ... |
| CVE-2019-10200 | HIGH | 7.2 | 1.3% | Mar 19, 2021 | A flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to create pods also have th... |
| CVE-2019-10128 | HIGH | 7.8 | 0.4% | Mar 19, 2021 | A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied Pos... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now