2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-1919 | HIGH | 8.4 | 0.3% | Jul 17, 2019 | A vulnerability in the Cisco FindIT Network Management Software virtual machine (VM) images could allow an unauthenticat... |
| CVE-2019-11771 | HIGH | 7.8 | 0.4% | Jul 17, 2019 | AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege eleva... |
| CVE-2019-1010283 | HIGH | 7.5 | 1.4% | Jul 17, 2019 | Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Info... |
| CVE-2019-13619 | HIGH | 7.5 | 6.1% | Jul 17, 2019 | In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could c... |
| CVE-2019-4430 | HIGH | 7.5 | 2.6% | Jul 17, 2019 | IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could s... |
| CVE-2019-13272 | HIGH | 7.8 | 52.2% | Jul 17, 2019 | In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce... |
| CVE-2019-6160 | HIGH | 8.8 | 1.4% | Jul 16, 2019 | A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access f... |
| CVE-2019-13115 | HIGH | 8.1 | 11.7% | Jul 16, 2019 | In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow t... |
| CVE-2019-12991 | HIGH | 8.8 | 74.5% | Jul 16, 2019 | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of ... |
| CVE-2019-12834 | HIGH | 7.3 | 0.9% | Jul 16, 2019 | In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the websi... |
| CVE-2019-10191 | HIGH | 7.5 | 1.9% | Jul 16, 2019 | A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to do... |
| CVE-2019-10190 | HIGH | 7.5 | 2.0% | Jul 16, 2019 | A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allow... |
| CVE-2019-13616 | HIGH | 8.1 | 3.3% | Jul 16, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in vid... |
| CVE-2019-1576 | HIGH | 8.8 | 1.8% | Jul 16, 2019 | Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PA... |
| CVE-2019-1575 | HIGH | 8.8 | 1.7% | Jul 16, 2019 | Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS ... |
| CVE-2019-1010057 | HIGH | 7.8 | 1.7% | Jul 16, 2019 | nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of servic... |
| CVE-2019-6827 | HIGH | 7.8 | 1.3% | Jul 15, 2019 | A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, ... |
| CVE-2019-6825 | HIGH | 7.8 | 1.2% | Jul 15, 2019 | A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which... |
| CVE-2019-6822 | HIGH | 7.8 | 3.7% | Jul 15, 2019 | A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code executio... |
| CVE-2019-1132 | HIGH | 7.8 | 9.8% | Jul 15, 2019 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in ... |
| CVE-2019-1130 | HIGH | 7.8 | 2.3% | Jul 15, 2019 | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li... |
| CVE-2019-1129 | HIGH | 7.8 | 1.8% | Jul 15, 2019 | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li... |
| CVE-2019-1068 | HIGH | 8.8 | 44.7% | Jul 15, 2019 | A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal ... |
| CVE-2019-0887 | HIGH | 8 | 71.0% | Jul 15, 2019 | A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an ... |
| CVE-2019-0880 | HIGH | 7.8 | 2.4% | Jul 15, 2019 | A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 E... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now