2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15982 | HIGH | 7.2 | 14.3% | Jan 6, 2020 | Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N... |
| CVE-2019-15981 | HIGH | 7.2 | 14.3% | Jan 6, 2020 | Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N... |
| CVE-2019-15980 | HIGH | 7.2 | 50.0% | Jan 6, 2020 | Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N... |
| CVE-2019-15979 | HIGH | 7.2 | 3.3% | Jan 6, 2020 | Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a... |
| CVE-2019-15978 | HIGH | 7.2 | 37.5% | Jan 6, 2020 | Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a... |
| CVE-2019-15977 | HIGH | 7.5 | 38.1% | Jan 6, 2020 | Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an una... |
| CVE-2019-15976 | CRITICAL | 9.8 | 92.8% | Jan 6, 2020 | Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an una... |
| CVE-2019-15975 | CRITICAL | 9.8 | 85.6% | Jan 6, 2020 | Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an una... |
| CVE-2019-5990 | HIGH | 7.5 | 1.3% | Jan 6, 2020 | Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password v... |
| CVE-2019-5989 | MEDIUM | 6.1 | 0.8% | Jan 6, 2020 | DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier all... |
| CVE-2019-5988 | MEDIUM | 6.1 | 0.8% | Jan 6, 2020 | Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows... |
| CVE-2019-5987 | HIGH | 8.8 | 2.5% | Jan 6, 2020 | Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute ar... |
| CVE-2019-20354 | MEDIUM | 4.3 | 8.8% | Jan 6, 2020 | The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user)... |
| CVE-2019-20352 | HIGH | 7.1 | 0.8% | Jan 6, 2020 | In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free whe... |
| CVE-2019-19265 | MEDIUM | 6.1 | 0.9% | Jan 6, 2020 | IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 1 of 2) in no... |
| CVE-2019-19266 | MEDIUM | 5.4 | 0.6% | Jan 6, 2020 | IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 2 of 2) in no... |
| CVE-2019-20155 | HIGH | 8.8 | 2.5% | Jan 5, 2020 | An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A... |
| CVE-2019-20154 | MEDIUM | 6.1 | 0.8% | Jan 5, 2020 | An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripti... |
| CVE-2019-20153 | MEDIUM | 4.9 | 1.2% | Jan 5, 2020 | An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external e... |
| CVE-2019-20077 | MEDIUM | 4.3 | 0.4% | Jan 5, 2020 | The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel ... |
| CVE-2019-20004 | HIGH | 8.8 | 1.2% | Jan 5, 2020 | An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain ... |
| CVE-2019-20337 | HIGH | 7.2 | 1.0% | Jan 5, 2020 | In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injectio... |
| CVE-2019-20336 | MEDIUM | 6.1 | 0.7% | Jan 5, 2020 | In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS. |
| CVE-2019-19911 | HIGH | 7.5 | 2.1% | Jan 5, 2020 | There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalid... |
| CVE-2019-19629 | HIGH | 7.5 | 1.2% | Jan 5, 2020 | In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private cod... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now