2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20367 | CRITICAL | 9.1 | 2.8% | Jan 8, 2020 | nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (s... |
| CVE-2019-20366 | MEDIUM | 6.1 | 1.3% | Jan 8, 2020 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents. |
| CVE-2019-20365 | MEDIUM | 6.1 | 1.2% | Jan 8, 2020 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page. |
| CVE-2019-20364 | MEDIUM | 6.1 | 1.2% | Jan 8, 2020 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp. |
| CVE-2019-20363 | MEDIUM | 6.1 | 1.4% | Jan 8, 2020 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents. |
| CVE-2019-19544 | HIGH | 7.8 | 0.4% | Jan 8, 2020 | CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows... |
| CVE-2019-10777 | CRITICAL | 9.8 | 1.6% | Jan 8, 2020 | In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within th... |
| CVE-2019-5188 | MEDIUM | 6.7 | 1.0% | Jan 8, 2020 | A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially c... |
| CVE-2019-19518 | CRITICAL | 9.8 | 2.8% | Jan 8, 2020 | CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server ... |
| CVE-2019-17076 | CRITICAL | 9.8 | 2.5% | Jan 8, 2020 | An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in ... |
| CVE-2019-10778 | CRITICAL | 9.8 | 3.5% | Jan 8, 2020 | devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the ex... |
| CVE-2019-20362 | HIGH | 7.8 | 0.7% | Jan 8, 2020 | In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of ... |
| CVE-2019-14820 | MEDIUM | 4.3 | 0.7% | Jan 8, 2020 | It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterCons... |
| CVE-2019-20361 | CRITICAL | 9.8 | 85.1% | Jan 8, 2020 | There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to b... |
| CVE-2019-20360 | HIGH | 7.5 | 2.5% | Jan 8, 2020 | A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and ... |
| CVE-2019-17151 | MEDIUM | 5.4 | 1.4% | Jan 7, 2020 | This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent W... |
| CVE-2019-17148 | HIGH | 7.8 | 0.5% | Jan 7, 2020 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel... |
| CVE-2019-17147 | HIGH | 8.8 | 13.7% | Jan 7, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N rout... |
| CVE-2019-17146 | CRITICAL | 9.8 | 9.5% | Jan 7, 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.... |
| CVE-2019-18652 | MEDIUM | 6.1 | 0.8% | Jan 7, 2020 | A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to... |
| CVE-2019-6529 | MEDIUM | 4.9 | 1.0% | Jan 7, 2020 | An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release ... |
| CVE-2019-14906 | CRITICAL | 9.8 | 1.8% | Jan 7, 2020 | A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue ... |
| CVE-2019-9465 | MEDIUM | 5.5 | 0.3% | Jan 7, 2020 | In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root c... |
| CVE-2019-6700 | MEDIUM | 6.5 | 0.9% | Jan 7, 2020 | An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may all... |
| CVE-2019-18386 | HIGH | 8.7 | 0.8% | Jan 7, 2020 | Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecif... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now