2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14745 | HIGH | 7.8 | 4.4% | Aug 7, 2019 | In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a craft... |
| CVE-2019-14744 | HIGH | 7.8 | 2.6% | Aug 7, 2019 | In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with min... |
| CVE-2019-10386 | HIGH | 8.8 | 0.9% | Aug 7, 2019 | A cross-site request forgery vulnerability in Jenkins XL TestView Plugin 1.2.0 and earlier in XLTestView.XLTestDescripto... |
| CVE-2019-10381 | HIGH | 7.5 | 1.1% | Aug 7, 2019 | Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins... |
| CVE-2019-10380 | HIGH | 8.8 | 1.8% | Aug 7, 2019 | Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security white... |
| CVE-2019-10371 | HIGH | 7.5 | 1.3% | Aug 7, 2019 | A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java all... |
| CVE-2019-1914 | HIGH | 7.2 | 24.9% | Aug 7, 2019 | A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authent... |
| CVE-2019-14734 | HIGH | 8.8 | 1.9% | Aug 7, 2019 | AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp. |
| CVE-2019-14733 | HIGH | 8.8 | 1.7% | Aug 7, 2019 | AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp. |
| CVE-2019-14732 | HIGH | 8.8 | 1.5% | Aug 7, 2019 | AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp. |
| CVE-2019-13106 | HIGH | 7.8 | 1.8% | Aug 6, 2019 | Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, whic... |
| CVE-2019-2386 | HIGH | 7.1 | 1.2% | Aug 6, 2019 | After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's... |
| CVE-2019-13104 | HIGH | 7.8 | 1.1% | Aug 6, 2019 | In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount... |
| CVE-2019-14347 | HIGH | 8.8 | 9.3% | Aug 6, 2019 | Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an ad... |
| CVE-2019-14692 | HIGH | 8.8 | 1.7% | Aug 6, 2019 | AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. |
| CVE-2019-14691 | HIGH | 8.8 | 1.7% | Aug 6, 2019 | AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. |
| CVE-2019-14690 | HIGH | 8.8 | 1.7% | Aug 6, 2019 | AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp. |
| CVE-2019-10980 | HIGH | 7.8 | 1.0% | Aug 5, 2019 | A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. T... |
| CVE-2019-12264 | HIGH | 7.1 | 8.3% | Aug 5, 2019 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc D... |
| CVE-2019-11270 | HIGH | 7.5 | 1.1% | Aug 5, 2019 | Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.wri... |
| CVE-2019-4473 | HIGH | 7.8 | 0.4% | Aug 5, 2019 | Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, whi... |
| CVE-2019-6969 | HIGH | 7.5 | 2.6% | Aug 2, 2019 | The web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that allows an unauthenticat... |
| CVE-2019-10961 | HIGH | 8.8 | 4.1% | Aug 2, 2019 | In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper va... |
| CVE-2019-14232 | HIGH | 7.5 | 3.5% | Aug 2, 2019 | An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.te... |
| CVE-2019-10171 | HIGH | 7.5 | 1.4% | Aug 2, 2019 | It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied i... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now