2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-6331 | LOW | 3.3 | 0.4% | Jan 9, 2020 | An issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential security vulnerability caus... |
| CVE-2019-6330 | CRITICAL | 9.8 | 2.4% | Jan 9, 2020 | A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7... |
| CVE-2019-6320 | HIGH | 8.1 | 0.6% | Jan 9, 2020 | Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22... |
| CVE-2019-4651 | CRITICAL | 9.8 | 1.4% | Jan 9, 2020 | IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted ... |
| CVE-2019-14920 | HIGH | 8.8 | 2.2% | Jan 9, 2020 | Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privilege... |
| CVE-2019-14919 | HIGH | 7.8 | 1.5% | Jan 9, 2020 | An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network atta... |
| CVE-2019-14918 | MEDIUM | 5.4 | 0.8% | Jan 9, 2020 | XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to injec... |
| CVE-2019-20224 | HIGH | 8.8 | 50.6% | Jan 9, 2020 | netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary O... |
| CVE-2019-11981 | — | — | — | Jan 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11984. Reason: This candidate is a duplicate of ... |
| CVE-2019-19332 | MEDIUM | 6.1 | 0.7% | Jan 9, 2020 | An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel... |
| CVE-2019-19494 | HIGH | 8.8 | 22.9% | Jan 9, 2020 | Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker ... |
| CVE-2019-16788 | — | — | — | Jan 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-20043. Reason: This candidate is a duplicate of ... |
| CVE-2019-16773 | — | — | — | Jan 9, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-20042. Reason: This candidate is a duplicate of ... |
| CVE-2019-11292 | MEDIUM | 6.5 | 1.1% | Jan 9, 2020 | Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.... |
| CVE-2019-9812 | CRITICAL | 9.3 | 1.3% | Jan 8, 2020 | Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by ... |
| CVE-2019-17025 | HIGH | 8.8 | 1.3% | Jan 8, 2020 | Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corru... |
| CVE-2019-17024 | HIGH | 8.8 | 2.5% | Jan 8, 2020 | Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evi... |
| CVE-2019-17023 | MEDIUM | 6.5 | 1.3% | Jan 8, 2020 | After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid... |
| CVE-2019-17022 | MEDIUM | 6.1 | 2.0% | Jan 8, 2020 | When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and ... |
| CVE-2019-17021 | MEDIUM | 5.3 | 1.9% | Jan 8, 2020 | During the initialization of a new content process, a race condition occurs that can allow a content process to disclose... |
| CVE-2019-17020 | MEDIUM | 6.5 | 1.1% | Jan 8, 2020 | If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Securit... |
| CVE-2019-17019 | HIGH | 8.8 | 1.0% | Jan 8, 2020 | When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by P... |
| CVE-2019-17018 | MEDIUM | 5.3 | 0.9% | Jan 8, 2020 | When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of... |
| CVE-2019-17017 | HIGH | 8.8 | 2.5% | Jan 8, 2020 | Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presum... |
| CVE-2019-17016 | MEDIUM | 6.1 | 2.0% | Jan 8, 2020 | When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @n... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now