2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-15982HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N...
CVE-2019-15981HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N...
CVE-2019-15980HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N...
CVE-2019-15979HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a...
CVE-2019-15978HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a...
CVE-2019-15977HIGH7.5Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an una...
CVE-2019-15976CRITICAL9.8Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an una...
CVE-2019-15975CRITICAL9.8Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an una...
CVE-2019-5990HIGH7.5Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password v...
CVE-2019-5989MEDIUM6.1DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier all...
CVE-2019-5988MEDIUM6.1Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows...
CVE-2019-5987HIGH8.8Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute ar...
CVE-2019-20354MEDIUM4.3The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user)...
CVE-2019-20352HIGH7.1In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free whe...
CVE-2019-19265MEDIUM6.1IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 1 of 2) in no...
CVE-2019-19266MEDIUM5.4IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 2 of 2) in no...
CVE-2019-20155HIGH8.8An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A...
CVE-2019-20154MEDIUM6.1An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripti...
CVE-2019-20153MEDIUM4.9An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external e...
CVE-2019-20077MEDIUM4.3The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel ...
CVE-2019-20004HIGH8.8An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain ...
CVE-2019-20337HIGH7.2In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injectio...
CVE-2019-20336MEDIUM6.1In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
CVE-2019-19911HIGH7.5There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalid...
CVE-2019-19629HIGH7.5In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private cod...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now