2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-7018 | — | — | 4.4% | May 24, 2019 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier ver... |
| CVE-2019-10685 | — | — | 2.3% | May 24, 2019 | A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0. |
| CVE-2019-8346 | — | — | 3.5% | May 24, 2019 | In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting (XSS) vulnerability a... |
| CVE-2019-2726 | — | — | 1.0% | May 24, 2019 | Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: ... |
| CVE-2019-2250 | — | — | 0.2% | May 24, 2019 | Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapd... |
| CVE-2019-2248 | — | — | 0.2% | May 24, 2019 | Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdrag... |
| CVE-2019-2247 | — | — | 0.2% | May 24, 2019 | Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing ... |
| CVE-2019-2245 | — | — | 1.0% | May 24, 2019 | Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which ... |
| CVE-2019-2244 | — | — | 1.0% | May 24, 2019 | Possible integer underflow can happen when calculating length of elementary stream info from invalid section length whic... |
| CVE-2019-11604 | — | — | 1.8% | May 24, 2019 | An issue was discovered in Quest KACE Systems Management Appliance before 9.1. The script at /service/kbot_service_notso... |
| CVE-2019-10848 | — | — | 8.5% | May 24, 2019 | Computrols CBAS 18.0.0 allows Username Enumeration. |
| CVE-2019-10847 | — | — | 2.4% | May 24, 2019 | Computrols CBAS 18.0.0 allows Cross-Site Request Forgery. |
| CVE-2019-12315 | — | — | 0.8% | May 24, 2019 | Samsung SCX-824 printers allow a reflected Cross-Site-Scripting (XSS) vulnerability that can be triggered by using the "... |
| CVE-2019-12195 | — | — | 1.8% | May 24, 2019 | TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking ... |
| CVE-2019-12155 | — | — | 5.5% | May 24, 2019 | interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference. |
| CVE-2019-12150 | — | — | 1.7% | May 24, 2019 | Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extens... |
| CVE-2019-11876 | — | — | 0.9% | May 24, 2019 | In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by ... |
| CVE-2019-11875 | — | — | 2.3% | May 24, 2019 | In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exp... |
| CVE-2019-12314 | — | — | 84.2% | May 24, 2019 | Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as ... |
| CVE-2019-12313 | — | — | 1.3% | May 24, 2019 | XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element. |
| CVE-2019-12312 | — | — | 2.7% | May 24, 2019 | In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer de... |
| CVE-2019-12309 | — | — | 1.3% | May 23, 2019 | dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerabilit... |
| CVE-2019-10850 | — | — | 1.9% | May 23, 2019 | Computrols CBAS 18.0.0 has Default Credentials. |
| CVE-2019-10849 | — | — | 9.0% | May 23, 2019 | Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure. |
| CVE-2019-10866 | — | — | 6.2% | May 23, 2019 | In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now