2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-10127 | HIGH | 8.8 | 0.3% | Mar 19, 2021 | A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQ... |
| CVE-2019-14852 | HIGH | 7.5 | 0.4% | Mar 18, 2021 | A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using t... |
| CVE-2019-18231 | HIGH | 7.5 | 0.8% | Mar 17, 2021 | Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may ... |
| CVE-2019-18630 | HIGH | 7.5 | 0.7% | Mar 4, 2021 | On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software r... |
| CVE-2019-18629 | HIGH | 8.1 | 1.0% | Mar 4, 2021 | Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software rele... |
| CVE-2019-25021 | HIGH | 7.5 | 1.2% | Feb 27, 2021 | An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access th... |
| CVE-2019-25020 | HIGH | 7.5 | 1.3% | Feb 27, 2021 | An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can... |
| CVE-2019-18945 | HIGH | 8 | 0.3% | Feb 26, 2021 | Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escal... |
| CVE-2019-18943 | HIGH | 8 | 0.3% | Feb 26, 2021 | Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) o... |
| CVE-2019-19005 | HIGH | 7.8 | 1.0% | Feb 11, 2021 | A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitma... |
| CVE-2019-25018 | HIGH | 7.5 | 1.6% | Feb 2, 2021 | In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the fi... |
| CVE-2019-20471 | HIGH | 7.8 | 0.4% | Feb 1, 2021 | An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup,... |
| CVE-2019-20470 | HIGH | 7.5 | 1.9% | Feb 1, 2021 | An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SM... |
| CVE-2019-25016 | HIGH | 8.8 | 2.6% | Jan 28, 2021 | In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authent... |
| CVE-2019-4702 | HIGH | 8.1 | 0.4% | Jan 13, 2021 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that... |
| CVE-2019-4160 | HIGH | 7.5 | 0.6% | Jan 13, 2021 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow ... |
| CVE-2019-20484 | HIGH | 8.1 | 0.9% | Jan 5, 2021 | An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project fi... |
| CVE-2019-4728 | HIGH | 8.8 | 5.0% | Jan 5, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow... |
| CVE-2019-25012 | HIGH | 7.5 | 1.4% | Jan 1, 2021 | The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml p... |
| CVE-2019-25007 | HIGH | 7.5 | 1.3% | Dec 31, 2020 | An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can cause a panic. |
| CVE-2019-25006 | HIGH | 7.5 | 0.8% | Dec 31, 2020 | An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong an... |
| CVE-2019-25005 | HIGH | 7.5 | 1.3% | Dec 31, 2020 | An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for att... |
| CVE-2019-25003 | HIGH | 7.5 | 1.4% | Dec 31, 2020 | An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-cha... |
| CVE-2019-25001 | HIGH | 7.5 | 1.4% | Dec 31, 2020 | An issue was discovered in the serde_cbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumptio... |
| CVE-2019-16747 | HIGH | 7.5 | 1.8% | Dec 30, 2020 | In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now