2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19891 | MEDIUM | 5.9 | 0.3% | Jan 13, 2020 | An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-i... |
| CVE-2019-18894 | HIGH | 7.8 | 1.8% | Jan 13, 2020 | In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast... |
| CVE-2019-18893 | MEDIUM | 6.1 | 1.8% | Jan 13, 2020 | XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.7... |
| CVE-2019-19547 | MEDIUM | 6.1 | 1.4% | Jan 13, 2020 | Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issu... |
| CVE-2019-20377 | MEDIUM | 6.1 | 0.6% | Jan 11, 2020 | TopList before 2019-09-03 allows XSS via a title. |
| CVE-2019-20379 | MEDIUM | 6.1 | 0.8% | Jan 11, 2020 | ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter. |
| CVE-2019-20378 | MEDIUM | 6.1 | 1.0% | Jan 11, 2020 | ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter. |
| CVE-2019-19475 | HIGH | 8.8 | 2.6% | Jan 10, 2020 | An issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated PostgreSQL which is built-i... |
| CVE-2019-13767 | HIGH | 8.8 | 15.5% | Jan 10, 2020 | Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the ... |
| CVE-2019-18588 | MEDIUM | 5.4 | 0.7% | Jan 10, 2020 | Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, a... |
| CVE-2019-19819 | MEDIUM | 5.5 | 1.0% | Jan 10, 2020 | The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDes... |
| CVE-2019-19817 | MEDIUM | 5.5 | 1.0% | Jan 10, 2020 | The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDest... |
| CVE-2019-18194 | HIGH | 7.8 | 2.2% | Jan 10, 2020 | TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junctio... |
| CVE-2019-14306 | HIGH | 7.5 | 1.4% | Jan 10, 2020 | Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). |
| CVE-2019-14304 | HIGH | 8.8 | 0.7% | Jan 10, 2020 | Ricoh SP C250DN 1.06 devices allow CSRF. |
| CVE-2019-14302 | MEDIUM | 6.8 | 0.4% | Jan 10, 2020 | On Ricoh SP C250DN 1.06 devices, a debug port can be used. |
| CVE-2019-14301 | HIGH | 7.5 | 1.4% | Jan 10, 2020 | Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). |
| CVE-2019-19820 | HIGH | 7.8 | 0.7% | Jan 10, 2020 | An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an ... |
| CVE-2019-4559 | MEDIUM | 5.3 | 1.1% | Jan 10, 2020 | IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users. The information can be used t... |
| CVE-2019-4508 | HIGH | 7.8 | 0.3% | Jan 10, 2020 | IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local a... |
| CVE-2019-20376 | MEDIUM | 6.1 | 0.8% | Jan 10, 2020 | A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows remote attackers to inject arbitrar... |
| CVE-2019-20375 | MEDIUM | 6.1 | 0.8% | Jan 10, 2020 | A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows remote attackers to inject arbitrar... |
| CVE-2019-20374 | CRITICAL | 9.6 | 2.3% | Jan 9, 2020 | A mutation cross-site scripting (XSS) issue in Typora through 0.9.9.31.2 on macOS and through 0.9.81 on Linux leads to R... |
| CVE-2019-20373 | HIGH | 7.8 | 0.4% | Jan 9, 2020 | LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the ... |
| CVE-2019-5209 | — | — | — | Jan 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now