2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-5057 | HIGH | 8.8 | 3.6% | Jul 31, 2019 | An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4. A speci... |
| CVE-2019-4165 | HIGH | 7.5 | 2.2% | Jul 31, 2019 | IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow a remote attacker to cause a denial of service attack using repeated r... |
| CVE-2019-10356 | HIGH | 8.8 | 2.5% | Jul 31, 2019 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method poin... |
| CVE-2019-10355 | HIGH | 8.8 | 2.5% | Jul 31, 2019 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts ... |
| CVE-2019-10162 | HIGH | 7.5 | 1.7% | Jul 30, 2019 | A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized use... |
| CVE-2019-10161 | HIGH | 7.8 | 0.5% | Jul 30, 2019 | It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSave... |
| CVE-2019-10152 | HIGH | 7.2 | 0.5% | Jul 30, 2019 | A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside ... |
| CVE-2019-7615 | HIGH | 7.4 | 0.6% | Jul 30, 2019 | A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trust... |
| CVE-2019-5459 | HIGH | 7.1 | 2.8% | Jul 30, 2019 | An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read. |
| CVE-2019-5456 | HIGH | 8.1 | 1.3% | Jul 30, 2019 | SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 an... |
| CVE-2019-5448 | HIGH | 8.1 | 0.7% | Jul 30, 2019 | Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypte... |
| CVE-2019-10142 | HIGH | 7.1 | 0.4% | Jul 30, 2019 | A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excludi... |
| CVE-2019-10141 | HIGH | 8.3 | 2.5% | Jul 30, 2019 | A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A S... |
| CVE-2019-10138 | HIGH | 8.8 | 1.0% | Jul 30, 2019 | A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform... |
| CVE-2019-4456 | HIGH | 7.1 | 1.9% | Jul 30, 2019 | IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection (XX... |
| CVE-2019-4062 | HIGH | 7.1 | 1.6% | Jul 30, 2019 | IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection (XXE) attack w... |
| CVE-2019-11775 | HIGH | 7.4 | 1.5% | Jul 30, 2019 | All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is ... |
| CVE-2019-14439 | HIGH | 7.5 | 10.6% | Jul 30, 2019 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typ... |
| CVE-2019-14418 | HIGH | 8.8 | 4.1% | Jul 29, 2019 | An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a dir... |
| CVE-2019-14417 | HIGH | 7.2 | 4.0% | Jul 29, 2019 | An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerabilit... |
| CVE-2019-14416 | HIGH | 7.2 | 4.5% | Jul 29, 2019 | An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerabilit... |
| CVE-2019-13498 | HIGH | 7.4 | 1.2% | Jul 29, 2019 | One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-m... |
| CVE-2019-13126 | HIGH | 7.5 | 1.7% | Jul 29, 2019 | An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted reques... |
| CVE-2019-11868 | HIGH | 7.8 | 0.4% | Jul 29, 2019 | See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying a... |
| CVE-2019-14267 | HIGH | 7.8 | 7.1% | Jul 29, 2019 | PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is misha... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now