2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-12582 | — | — | — | Jun 3, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-12583. Reason: This candidate is a reservation d... |
| CVE-2019-12589 | — | — | 0.5% | Jun 3, 2019 | In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restricti... |
| CVE-2019-12585 | — | — | 5.0% | Jun 3, 2019 | Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution iss... |
| CVE-2019-12584 | — | — | 2.6% | Jun 3, 2019 | Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php... |
| CVE-2019-12569 | — | — | 15.0% | Jun 3, 2019 | A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a ... |
| CVE-2019-12566 | — | — | 1.1% | Jun 3, 2019 | The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php. This is ... |
| CVE-2019-12564 | — | — | 2.0% | Jun 3, 2019 | In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing app... |
| CVE-2019-12530 | — | — | 1.5% | Jun 2, 2019 | Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue... |
| CVE-2019-12515 | — | — | 1.3% | Jun 2, 2019 | There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01... |
| CVE-2019-9653 | — | — | 11.5% | May 31, 2019 | NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands ... |
| CVE-2019-9106 | — | — | 2.8% | May 31, 2019 | The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attacker... |
| CVE-2019-9105 | — | — | 2.4% | May 31, 2019 | The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attacker... |
| CVE-2019-6725 | — | — | 1.8% | May 31, 2019 | The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. Afte... |
| CVE-2019-5678 | — | — | 0.9% | May 31, 2019 | NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attac... |
| CVE-2019-10123 | — | — | 65.8% | May 31, 2019 | SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) ... |
| CVE-2019-10069 | — | — | 3.4% | May 31, 2019 | In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly. |
| CVE-2019-10049 | — | — | 1.2% | May 31, 2019 | It is possible for an attacker with regular user access to the web application of Pydio through 8.2.2 to trick an admini... |
| CVE-2019-10048 | — | — | 3.3% | May 31, 2019 | The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation a... |
| CVE-2019-10047 | — | — | 0.7% | May 31, 2019 | A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the fi... |
| CVE-2019-10046 | — | — | 1.2% | May 31, 2019 | An unauthenticated attacker can obtain information about the Pydio 8.2.2 configuration including session timeout, librar... |
| CVE-2019-10045 | — | — | 1.0% | May 31, 2019 | The "action" get_sess_id in the web application of Pydio through 8.2.2 discloses the session cookie value in the respons... |
| CVE-2019-10038 | — | — | 1.3% | May 31, 2019 | Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file... |
| CVE-2019-9891 | — | — | 3.3% | May 31, 2019 | The function getopt_simple as described in Advanced Bash Scripting Guide (ISBN 978-1435752184) allows privilege escalati... |
| CVE-2019-9871 | — | — | 5.8% | May 31, 2019 | Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission. |
| CVE-2019-10328 | — | — | 1.9% | May 31, 2019 | Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attac... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now