2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19841 | CRITICAL | 9.8 | 3.3% | Jan 22, 2020 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST requ... |
| CVE-2019-19840 | CRITICAL | 9.8 | 4.1% | Jan 22, 2020 | A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remot... |
| CVE-2019-19843 | CRITICAL | 9.8 | 1.8% | Jan 22, 2020 | Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credent... |
| CVE-2019-19836 | CRITICAL | 9.8 | 3.6% | Jan 22, 2020 | AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POS... |
| CVE-2019-19834 | HIGH | 7.2 | 2.2% | Jan 22, 2020 | Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jail... |
| CVE-2019-16792 | HIGH | 7.5 | 2.1% | Jan 22, 2020 | Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would heade... |
| CVE-2019-5647 | HIGH | 7.1 | 0.3% | Jan 22, 2020 | The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after ... |
| CVE-2019-6146 | MEDIUM | 6.1 | 3.0% | Jan 22, 2020 | It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host heade... |
| CVE-2019-18586 | — | — | — | Jan 22, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-18585 | — | — | — | Jan 22, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-18584 | — | — | — | Jan 22, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-18583 | — | — | — | Jan 22, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-6858 | HIGH | 7.8 | 0.4% | Jan 22, 2020 | A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software Version prior to V1.0.8.1)... |
| CVE-2019-10781 | CRITICAL | 9.8 | 1.4% | Jan 22, 2020 | In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate(... |
| CVE-2019-10780 | CRITICAL | 9.8 | 2.8% | Jan 22, 2020 | BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built... |
| CVE-2019-12490 | MEDIUM | 6.5 | 1.6% | Jan 22, 2020 | An issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can occur because of use of _bl... |
| CVE-2019-16791 | MEDIUM | 5.9 | 0.7% | Jan 22, 2020 | In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, re... |
| CVE-2019-20388 | HIGH | 7.5 | 3.1% | Jan 21, 2020 | xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. |
| CVE-2019-20387 | HIGH | 7.5 | 2.3% | Jan 21, 2020 | repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose lengt... |
| CVE-2019-19414 | HIGH | 7.5 | 1.0% | Jan 21, 2020 | There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation,... |
| CVE-2019-19413 | HIGH | 7.5 | 1.0% | Jan 21, 2020 | There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation,... |
| CVE-2019-19886 | HIGH | 7.5 | 2.5% | Jan 21, 2020 | Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in lar... |
| CVE-2019-18426 | HIGH | 8.2 | 67.9% | Jan 21, 2020 | A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.... |
| CVE-2019-17584 | HIGH | 7.5 | 1.1% | Jan 21, 2020 | The Meinberg SyncBox/PTP/PTPv2 devices have default SSH keys which allow attackers to get root access to the devices. Al... |
| CVE-2019-5714 | — | — | — | Jan 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now