2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19262 | MEDIUM | 4.3 | 0.8% | Jan 3, 2020 | GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions. |
| CVE-2019-19261 | HIGH | 8.8 | 1.0% | Jan 3, 2020 | GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF. |
| CVE-2019-19260 | MEDIUM | 5.4 | 0.7% | Jan 3, 2020 | GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2). |
| CVE-2019-19259 | MEDIUM | 4.3 | 0.6% | Jan 3, 2020 | GitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object Reference (IDOR). |
| CVE-2019-19258 | MEDIUM | 5.3 | 0.9% | Jan 3, 2020 | GitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control. |
| CVE-2019-19257 | MEDIUM | 5.3 | 0.9% | Jan 3, 2020 | GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 1 of 2). |
| CVE-2019-19256 | MEDIUM | 5.3 | 0.9% | Jan 3, 2020 | GitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control. |
| CVE-2019-19255 | MEDIUM | 4.3 | 0.8% | Jan 3, 2020 | GitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control. |
| CVE-2019-19311 | MEDIUM | 5.4 | 0.7% | Jan 3, 2020 | GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields. |
| CVE-2019-19254 | MEDIUM | 5.3 | 1.1% | Jan 3, 2020 | GitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has Incorrect Access Control. |
| CVE-2019-19088 | CRITICAL | 9.8 | 1.7% | Jan 3, 2020 | Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal. |
| CVE-2019-19087 | MEDIUM | 4.3 | 0.7% | Jan 3, 2020 | Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2). |
| CVE-2019-19086 | MEDIUM | 4.3 | 0.7% | Jan 3, 2020 | Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2). |
| CVE-2019-5304 | HIGH | 7.5 | 1.0% | Jan 3, 2020 | Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Ech... |
| CVE-2019-19441 | MEDIUM | 6.5 | 0.3% | Jan 3, 2020 | HUAWEI P30 smart phones with versions earlier than 10.0.0.166(C00E66R1P11) have an information leak vulnerability. An at... |
| CVE-2019-20330 | CRITICAL | 9.8 | 8.6% | Jan 3, 2020 | FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking. |
| CVE-2019-20329 | HIGH | 8.1 | 0.6% | Jan 3, 2020 | OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000. |
| CVE-2019-10205 | MEDIUM | 6.3 | 0.3% | Jan 2, 2020 | A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database... |
| CVE-2019-20225 | MEDIUM | 6.1 | 0.6% | Jan 2, 2020 | MyBB before 1.8.22 allows an open redirect on login. |
| CVE-2019-20219 | HIGH | 8.8 | 1.3% | Jan 2, 2020 | ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c. |
| CVE-2019-14864 | MEDIUM | 6.5 | 1.9% | Jan 2, 2020 | Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the... |
| CVE-2019-14863 | MEDIUM | 6.1 | 1.4% | Jan 2, 2020 | There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web applic... |
| CVE-2019-14862 | MEDIUM | 6.1 | 2.0% | Jan 2, 2020 | There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application,... |
| CVE-2019-14859 | CRITICAL | 9.1 | 1.6% | Jan 2, 2020 | A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used D... |
| CVE-2019-10775 | HIGH | 7.5 | 1.3% | Jan 2, 2020 | ecstatic have a denial of service vulnerability. Successful exploitation could lead to crash of an application. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now