2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13303 | HIGH | 8.8 | 2.2% | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage. |
| CVE-2019-13302 | HIGH | 8.8 | 2.1% | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages. |
| CVE-2019-13300 | HIGH | 8.8 | 3.2% | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishand... |
| CVE-2019-13299 | HIGH | 8.8 | 2.3% | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel. |
| CVE-2019-13298 | HIGH | 8.8 | 2.4% | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because... |
| CVE-2019-13297 | HIGH | 8.8 | 3.1% | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a... |
| CVE-2019-13295 | HIGH | 8.8 | 3.1% | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a... |
| CVE-2019-1889 | HIGH | 7.2 | 2.8% | Jul 4, 2019 | A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (AP... |
| CVE-2019-1886 | HIGH | 8.6 | 1.3% | Jul 4, 2019 | A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, re... |
| CVE-2019-1884 | HIGH | 7.7 | 1.5% | Jul 4, 2019 | A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could al... |
| CVE-2019-1855 | HIGH | 7.3 | 2.2% | Jul 4, 2019 | A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an a... |
| CVE-2019-13283 | HIGH | 7.8 | 1.1% | Jul 4, 2019 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc ... |
| CVE-2019-13282 | HIGH | 7.8 | 1.1% | Jul 4, 2019 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when usin... |
| CVE-2019-13281 | HIGH | 7.8 | 1.2% | Jul 4, 2019 | In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing t... |
| CVE-2019-13241 | HIGH | 7.8 | 1.6% | Jul 4, 2019 | FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a .... |
| CVE-2019-13226 | HIGH | 7 | 0.3% | Jul 4, 2019 | deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename> in the Helper::temporary... |
| CVE-2019-10101 | HIGH | 8.1 | 1.6% | Jul 3, 2019 | JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, pote... |
| CVE-2019-5052 | HIGH | 8.8 | 4.5% | Jul 3, 2019 | An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted fi... |
| CVE-2019-5051 | HIGH | 8.8 | 4.0% | Jul 3, 2019 | An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A m... |
| CVE-2019-6631 | HIGH | 7.5 | 2.5% | Jul 3, 2019 | On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing... |
| CVE-2019-6629 | HIGH | 7.5 | 1.3% | Jul 3, 2019 | On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TM... |
| CVE-2019-13164 | HIGH | 7.8 | 0.5% | Jul 3, 2019 | qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a... |
| CVE-2019-6623 | HIGH | 7.5 | 2.5% | Jul 2, 2019 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSess... |
| CVE-2019-10137 | HIGH | 8.1 | 3.1% | Jul 2, 2019 | A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached clie... |
| CVE-2019-7258 | HIGH | 8.8 | 19.6% | Jul 2, 2019 | Linear eMerge E3-Series devices allow Privilege Escalation. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now