2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15854 | HIGH | 8.8 | 1.3% | Jan 17, 2020 | An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with ... |
| CVE-2019-20003 | MEDIUM | 6.1 | 0.7% | Jan 17, 2020 | Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components.... |
| CVE-2019-3686 | MEDIUM | 6.1 | 0.6% | Jan 17, 2020 | openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter.... |
| CVE-2019-3683 | HIGH | 8.8 | 0.9% | Jan 17, 2020 | The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f ev... |
| CVE-2019-3682 | HIGH | 7.8 | 0.3% | Jan 17, 2020 | The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on... |
| CVE-2019-19802 | MEDIUM | 6.5 | 0.8% | Jan 17, 2020 | In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.... |
| CVE-2019-19801 | MEDIUM | 5.5 | 0.3% | Jan 17, 2020 | In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 pri... |
| CVE-2019-19142 | HIGH | 7.5 | 7.8% | Jan 17, 2020 | Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmwa... |
| CVE-2019-17361 | CRITICAL | 9.8 | 15.1% | Jan 17, 2020 | In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection.... |
| CVE-2019-15742 | HIGH | 7.8 | 5.0% | Jan 17, 2020 | A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application... |
| CVE-2019-3997 | MEDIUM | 4.6 | 0.4% | Jan 16, 2020 | Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthentica... |
| CVE-2019-5145 | HIGH | 8.8 | 3.1% | Jan 16, 2020 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A ... |
| CVE-2019-5131 | HIGH | 8.8 | 2.4% | Jan 16, 2020 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, versio... |
| CVE-2019-5130 | HIGH | 8.8 | 2.3% | Jan 16, 2020 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version... |
| CVE-2019-5126 | HIGH | 8.8 | 3.5% | Jan 16, 2020 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A ... |
| CVE-2019-9503 | HIGH | 8.3 | 3.3% | Jan 16, 2020 | The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame vali... |
| CVE-2019-9500 | HIGH | 8.3 | 3.8% | Jan 16, 2020 | The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffe... |
| CVE-2019-11998 | MEDIUM | 5.5 | 0.8% | Jan 16, 2020 | HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrato... |
| CVE-2019-11997 | MEDIUM | 6.1 | 1.0% | Jan 16, 2020 | A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.... |
| CVE-2019-17573 | MEDIUM | 6.1 | 7.1% | Jan 16, 2020 | By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This... |
| CVE-2019-13524 | HIGH | 7.5 | 1.5% | Jan 16, 2020 | GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/3... |
| CVE-2019-12423 | HIGH | 7.5 | 6.1% | Jan 16, 2020 | Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, ... |
| CVE-2019-19278 | MEDIUM | 6.8 | 0.3% | Jan 16, 2020 | A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-... |
| CVE-2019-18282 | MEDIUM | 5.3 | 2.6% | Jan 16, 2020 | The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CI... |
| CVE-2019-13939 | HIGH | 7.1 | 0.7% | Jan 16, 2020 | A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now