2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-16154 | MEDIUM | 6.1 | 0.7% | Jan 7, 2020 | An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthent... |
| CVE-2019-10776 | CRITICAL | 9.8 | 2.1% | Jan 7, 2020 | In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl. ... |
| CVE-2019-14819 | HIGH | 8.8 | 1.0% | Jan 7, 2020 | A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc s... |
| CVE-2019-14879 | MEDIUM | 5.4 | 0.7% | Jan 7, 2020 | A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohor... |
| CVE-2019-14866 | HIGH | 7.3 | 0.7% | Jan 7, 2020 | In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is us... |
| CVE-2019-14854 | MEDIUM | 6.5 | 0.8% | Jan 7, 2020 | OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given op... |
| CVE-2019-14843 | HIGH | 8.8 | 1.2% | Jan 7, 2020 | A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. Thi... |
| CVE-2019-14837 | CRITICAL | 9.1 | 1.7% | Jan 7, 2020 | A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this ... |
| CVE-2019-14834 | LOW | 3.7 | 2.7% | Jan 7, 2020 | A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denia... |
| CVE-2019-6857 | HIGH | 7.5 | 1.6% | Jan 6, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi... |
| CVE-2019-6856 | HIGH | 7.5 | 1.6% | Jan 6, 2020 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modi... |
| CVE-2019-6855 | HIGH | 7.3 | 1.0% | Jan 6, 2020 | Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity P... |
| CVE-2019-6854 | HIGH | 7.8 | 0.2% | Jan 6, 2020 | A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -wi... |
| CVE-2019-20348 | MEDIUM | 6.8 | 0.6% | Jan 6, 2020 | OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. ... |
| CVE-2019-18842 | MEDIUM | 6.1 | 0.7% | Jan 6, 2020 | A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H ... |
| CVE-2019-18625 | HIGH | 7.5 | 1.7% | Jan 6, 2020 | An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TC... |
| CVE-2019-16271 | MEDIUM | 5.3 | 1.6% | Jan 6, 2020 | DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emu... |
| CVE-2019-19585 | HIGH | 7.8 | 5.7% | Jan 6, 2020 | An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. A... |
| CVE-2019-19509 | HIGH | 8.8 | 71.6% | Jan 6, 2020 | An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a ... |
| CVE-2019-18179 | MEDIUM | 4.3 | 1.3% | Jan 6, 2020 | An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5... |
| CVE-2019-16717 | MEDIUM | 6.1 | 1.5% | Jan 6, 2020 | OX App Suite through 7.10.2 has XSS. |
| CVE-2019-16716 | MEDIUM | 6.6 | 1.7% | Jan 6, 2020 | OX App Suite through 7.10.2 has Incorrect Access Control. |
| CVE-2019-16274 | HIGH | 7.5 | 0.7% | Jan 6, 2020 | DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP. |
| CVE-2019-16273 | CRITICAL | 9.8 | 2.3% | Jan 6, 2020 | DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading ... |
| CVE-2019-16272 | CRITICAL | 9.8 | 1.2% | Jan 6, 2020 | On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enab... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now