2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-0180 | MEDIUM | 4.4 | 0.3% | Jun 13, 2019 | Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially... |
| CVE-2019-0179 | MEDIUM | 4.4 | 0.3% | Jun 13, 2019 | Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially... |
| CVE-2019-0177 | MEDIUM | 4.4 | 0.3% | Jun 13, 2019 | Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially... |
| CVE-2019-0175 | MEDIUM | 4.4 | 0.3% | Jun 13, 2019 | Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially... |
| CVE-2019-11269 | MEDIUM | 5.4 | 8.9% | Jun 12, 2019 | Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as w... |
| CVE-2019-6567 | MEDIUM | 5.5 | 0.3% | Jun 12, 2019 | A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4),... |
| CVE-2019-3875 | MEDIUM | 6.5 | 0.3% | Jun 12, 2019 | A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certific... |
| CVE-2019-3873 | MEDIUM | 6.4 | 0.9% | Jun 12, 2019 | It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude paramete... |
| CVE-2019-3872 | MEDIUM | 5.4 | 0.7% | Jun 12, 2019 | It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Applicati... |
| CVE-2019-1081 | MEDIUM | 4.2 | 2.3% | Jun 12, 2019 | An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An ... |
| CVE-2019-1054 | MEDIUM | 5 | 1.6% | Jun 12, 2019 | A security feature bypass vulnerability exists in Edge that allows for bypassing Mark of the Web Tagging (MOTW). Failing... |
| CVE-2019-1053 | MEDIUM | 6.3 | 1.3% | Jun 12, 2019 | An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker wh... |
| CVE-2019-1052 | MEDIUM | 4.2 | 2.4% | Jun 12, 2019 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi... |
| CVE-2019-1051 | MEDIUM | 4.2 | 4.1% | Jun 12, 2019 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi... |
| CVE-2019-1050 | MEDIUM | 4.7 | 4.3% | Jun 12, 2019 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2019-1049 | MEDIUM | 4.7 | 4.3% | Jun 12, 2019 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2019-1048 | MEDIUM | 4.7 | 4.3% | Jun 12, 2019 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2019-1047 | MEDIUM | 4.7 | 4.3% | Jun 12, 2019 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2019-1046 | MEDIUM | 4.7 | 4.3% | Jun 12, 2019 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m... |
| CVE-2019-1044 | MEDIUM | 5.3 | 1.0% | Jun 12, 2019 | A security feature bypass vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memor... |
| CVE-2019-1043 | MEDIUM | 6.4 | 3.0% | Jun 12, 2019 | A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability c... |
| CVE-2019-1040 | MEDIUM | 5.3 | 48.0% | Jun 12, 2019 | A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass t... |
| CVE-2019-1039 | MEDIUM | 5.5 | 1.4% | Jun 12, 2019 | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To expl... |
| CVE-2019-1025 | MEDIUM | 6.5 | 5.4% | Jun 12, 2019 | A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully... |
| CVE-2019-1024 | MEDIUM | 4.2 | 2.4% | Jun 12, 2019 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now