2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15712 | HIGH | 7.2 | 1.0% | Jan 23, 2020 | An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow admi... |
| CVE-2019-15707 | MEDIUM | 4.9 | 1.2% | Jan 23, 2020 | An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow admi... |
| CVE-2019-5593 | MEDIUM | 5.5 | 0.2% | Jan 23, 2020 | Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plai... |
| CVE-2019-18222 | MEDIUM | 4.7 | 0.3% | Jan 23, 2020 | The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the bli... |
| CVE-2019-16153 | CRITICAL | 9.8 | 1.1% | Jan 23, 2020 | A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attac... |
| CVE-2019-14888 | HIGH | 7.5 | 2.1% | Jan 23, 2020 | A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker... |
| CVE-2019-3691 | HIGH | 7.8 | 0.5% | Jan 23, 2020 | A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE... |
| CVE-2019-19839 | CRITICAL | 9.8 | 3.3% | Jan 23, 2020 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST requ... |
| CVE-2019-19838 | CRITICAL | 9.8 | 24.4% | Jan 23, 2020 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST requ... |
| CVE-2019-18899 | MEDIUM | 5.5 | 0.3% | Jan 23, 2020 | The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root pri... |
| CVE-2019-17202 | HIGH | 7.8 | 0.3% | Jan 23, 2020 | FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to el... |
| CVE-2019-17201 | HIGH | 7.8 | 0.3% | Jan 23, 2020 | FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to el... |
| CVE-2019-18898 | HIGH | 7.8 | 0.5% | Jan 23, 2020 | UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; ope... |
| CVE-2019-19837 | MEDIUM | 5.3 | 2.0% | Jan 23, 2020 | Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote informa... |
| CVE-2019-19835 | HIGH | 7.5 | 1.8% | Jan 23, 2020 | SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of serv... |
| CVE-2019-20399 | MEDIUM | 5.9 | 0.9% | Jan 23, 2020 | A timing vulnerability in the Scalar::check_overflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows ... |
| CVE-2019-20398 | MEDIUM | 6.5 | 1.8% | Jan 22, 2020 | A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a ... |
| CVE-2019-20397 | HIGH | 8.8 | 2.5% | Jan 22, 2020 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminate... |
| CVE-2019-20396 | MEDIUM | 6.5 | 1.9% | Jan 22, 2020 | A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during l... |
| CVE-2019-20395 | MEDIUM | 6.5 | 1.8% | Jan 22, 2020 | A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafref... |
| CVE-2019-20394 | HIGH | 8.8 | 2.8% | Jan 22, 2020 | A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notifica... |
| CVE-2019-20393 | HIGH | 8.8 | 2.8% | Jan 22, 2020 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applicat... |
| CVE-2019-20392 | MEDIUM | 6.5 | 1.9% | Jan 22, 2020 | An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-fe... |
| CVE-2019-20391 | MEDIUM | 6.5 | 1.9% | Jan 22, 2020 | An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-fe... |
| CVE-2019-19842 | CRITICAL | 9.8 | 5.0% | Jan 22, 2020 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST requ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now