2019 CVE Vulnerabilities

17,620 CVEs published in 2019.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2019-14439HIGH7.5A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typ...
CVE-2019-14418HIGH8.8An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a dir...
CVE-2019-14417HIGH7.2An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerabilit...
CVE-2019-14416HIGH7.2An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerabilit...
CVE-2019-13498HIGH7.4One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-m...
CVE-2019-13126HIGH7.5An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted reques...
CVE-2019-11868HIGH7.8See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying a...
CVE-2019-14267HIGH7.8PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is misha...
CVE-2019-13103HIGH7.1A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recu...
CVE-2019-1020018HIGH7.3Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link.
CVE-2019-1020011HIGH7.2SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator author...
CVE-2019-14323HIGH7.5SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte....
CVE-2019-14322HIGH7.5In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.
CVE-2019-13565HIGH7.5An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relyin...
CVE-2019-13386HIGH8.8In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attack...
CVE-2019-5607HIGH7.8In FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350223, 11.3-RELEASE bef...
CVE-2019-5606HIGH7.8In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE bef...
CVE-2019-5603HIGH7.8In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE bef...
CVE-2019-10184HIGH7.5undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory struc...
CVE-2019-4415HIGH7.8IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user to obtain elevated privileges due to improper security contex...
CVE-2019-4212HIGH8.8IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio...
CVE-2019-3622HIGH8.2Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3...
CVE-2019-10982HIGH7.8Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities ...
CVE-2019-1010180HIGH7.8GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memor...
CVE-2019-2867HIGH8.2Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now