2019 CVE Vulnerabilities
17,620 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13109 | MEDIUM | 6.5 | 1.6% | Jun 30, 2019 | An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG ... |
| CVE-2019-13108 | MEDIUM | 6.5 | 1.4% | Jun 30, 2019 | An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG ... |
| CVE-2019-11828 | MEDIUM | 5.4 | 0.7% | Jun 30, 2019 | Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated users... |
| CVE-2019-11827 | MEDIUM | 5.4 | 0.8% | Jun 30, 2019 | Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows rem... |
| CVE-2019-11825 | MEDIUM | 5.4 | 0.8% | Jun 30, 2019 | Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers ... |
| CVE-2019-11822 | MEDIUM | 6.5 | 1.3% | Jun 30, 2019 | Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before ... |
| CVE-2019-13072 | MEDIUM | 5.4 | 0.9% | Jun 30, 2019 | Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript... |
| CVE-2019-13038 | MEDIUM | 6.1 | 1.4% | Jun 29, 2019 | mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the /... |
| CVE-2019-10175 | MEDIUM | 6.5 | 1.0% | Jun 28, 2019 | A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning fea... |
| CVE-2019-3629 | MEDIUM | 6.5 | 1.2% | Jun 27, 2019 | Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.... |
| CVE-2019-10177 | MEDIUM | 6.5 | 1.0% | Jun 27, 2019 | A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and ... |
| CVE-2019-5840 | MEDIUM | 4.3 | 1.1% | Jun 27, 2019 | Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass... |
| CVE-2019-5839 | MEDIUM | 4.3 | 1.3% | Jun 27, 2019 | Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a... |
| CVE-2019-5838 | MEDIUM | 4.3 | 0.8% | Jun 27, 2019 | Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinc... |
| CVE-2019-5837 | MEDIUM | 6.5 | 1.6% | Jun 27, 2019 | Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cros... |
| CVE-2019-5835 | MEDIUM | 6.5 | 1.7% | Jun 27, 2019 | Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially pe... |
| CVE-2019-5834 | MEDIUM | 6.5 | 0.7% | Jun 27, 2019 | Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain... |
| CVE-2019-5833 | MEDIUM | 4.3 | 1.0% | Jun 27, 2019 | Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to d... |
| CVE-2019-5832 | MEDIUM | 6.5 | 1.3% | Jun 27, 2019 | Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to le... |
| CVE-2019-5830 | MEDIUM | 6.5 | 1.4% | Jun 27, 2019 | Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-o... |
| CVE-2019-5823 | MEDIUM | 5.4 | 1.1% | Jun 27, 2019 | Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to ... |
| CVE-2019-5818 | MEDIUM | 6.5 | 1.6% | Jun 27, 2019 | Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sens... |
| CVE-2019-5814 | MEDIUM | 6.5 | 0.9% | Jun 27, 2019 | Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross... |
| CVE-2019-5812 | MEDIUM | 6.5 | 1.4% | Jun 27, 2019 | Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spo... |
| CVE-2019-5810 | MEDIUM | 6.5 | 1.1% | Jun 27, 2019 | Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sen... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now