2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25446 | HIGH | 8.8 | 0.2% | Feb 22, 2026 | DIGIT CENTRIS ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q... |
| CVE-2019-25443 | HIGH | 8.8 | 0.2% | Feb 22, 2026 | Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database qu... |
| CVE-2019-25442 | HIGH | 8.8 | 0.4% | Feb 22, 2026 | Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databas... |
| CVE-2019-25440 | HIGH | 8.8 | 0.2% | Feb 22, 2026 | WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queri... |
| CVE-2019-25439 | HIGH | 8.8 | 0.3% | Feb 22, 2026 | NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by i... |
| CVE-2019-25433 | HIGH | 8.8 | 0.3% | Feb 22, 2026 | XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database que... |
| CVE-2019-25391 | HIGH | 8.8 | 0.3% | Feb 22, 2026 | Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate... |
| CVE-2019-25366 | HIGH | 8.8 | 0.3% | Feb 22, 2026 | microASP Portal+ CMS contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary ... |
| CVE-2019-25454 | MEDIUM | 6.1 | 0.2% | Feb 20, 2026 | phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject ma... |
| CVE-2019-25453 | MEDIUM | 6.1 | 0.3% | Feb 20, 2026 | phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject... |
| CVE-2019-25451 | HIGH | 8.8 | 0.3% | Feb 20, 2026 | phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized datab... |
| CVE-2019-25449 | MEDIUM | 6.1 | 0.2% | Feb 20, 2026 | OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious script... |
| CVE-2019-25448 | MEDIUM | 6.4 | 0.3% | Feb 20, 2026 | OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malic... |
| CVE-2019-25447 | LOW | 3.5 | 0.1% | Feb 20, 2026 | OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform... |
| CVE-2019-25441 | CRITICAL | 9.8 | 8.5% | Feb 20, 2026 | thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary syst... |
| CVE-2019-25438 | HIGH | 8.8 | 0.5% | Feb 20, 2026 | LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbit... |
| CVE-2019-25437 | MEDIUM | 6.7 | 0.1% | Feb 20, 2026 | Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attac... |
| CVE-2019-25436 | MEDIUM | 6.5 | 0.2% | Feb 20, 2026 | Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to... |
| CVE-2019-25435 | HIGH | 8.4 | 0.3% | Feb 20, 2026 | Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function tha... |
| CVE-2019-25434 | MEDIUM | 5.5 | 0.4% | Feb 20, 2026 | SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the applic... |
| CVE-2019-25432 | HIGH | 8.8 | 0.4% | Feb 20, 2026 | Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting ... |
| CVE-2019-25431 | HIGH | 8.8 | 0.3% | Feb 20, 2026 | delpino73 Blue-Smiley-Organizer 1.32 contains an SQL injection vulnerability in the datetime parameter that allows unaut... |
| CVE-2019-25445 | MEDIUM | 6.1 | 0.2% | Feb 20, 2026 | Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject ... |
| CVE-2019-25444 | CRITICAL | 9.1 | 0.4% | Feb 20, 2026 | Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da... |
| CVE-2019-25430 | MEDIUM | 6.1 | 0.4% | Feb 19, 2026 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now