2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-10158 | CRITICAL | 9.8 | 2.0% | Jan 2, 2020 | A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protecti... |
| CVE-2019-20223 | MEDIUM | 6.1 | 0.7% | Jan 2, 2020 | In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a... |
| CVE-2019-20222 | MEDIUM | 6.1 | 0.7% | Jan 2, 2020 | In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.php page a... |
| CVE-2019-20221 | MEDIUM | 6.1 | 0.7% | Jan 2, 2020 | In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload i... |
| CVE-2019-20220 | MEDIUM | 6.1 | 0.7% | Jan 2, 2020 | In Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced.php page is affected b... |
| CVE-2019-20218 | HIGH | 7.5 | 3.6% | Jan 2, 2020 | selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error. |
| CVE-2019-20213 | HIGH | 7.5 | 1.9% | Jan 2, 2020 | D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a v... |
| CVE-2019-20208 | MEDIUM | 5.5 | 1.5% | Jan 2, 2020 | dimC_Read in isomedia/box_code_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow. |
| CVE-2019-20205 | HIGH | 8.8 | 1.0% | Jan 2, 2020 | libsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c. |
| CVE-2019-20204 | MEDIUM | 5.4 | 3.4% | Jan 2, 2020 | The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginn... |
| CVE-2019-20203 | MEDIUM | 5.3 | 2.1% | Jan 2, 2020 | The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by s... |
| CVE-2019-20202 | MEDIUM | 6.5 | 1.2% | Dec 31, 2019 | An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block ... |
| CVE-2019-20201 | MEDIUM | 6.5 | 1.2% | Dec 31, 2019 | An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an ... |
| CVE-2019-20200 | MEDIUM | 6.5 | 1.2% | Dec 31, 2019 | An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, perfo... |
| CVE-2019-20199 | MEDIUM | 6.5 | 1.2% | Dec 31, 2019 | An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, perfo... |
| CVE-2019-20198 | MEDIUM | 6.5 | 1.2% | Dec 31, 2019 | An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack... |
| CVE-2019-18568 | HIGH | 8.8 | 0.7% | Dec 31, 2019 | Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a... |
| CVE-2019-20197 | HIGH | 8.8 | 22.4% | Dec 31, 2019 | In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id pa... |
| CVE-2019-3984 | CRITICAL | 9.8 | 3.8% | Dec 31, 2019 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due ... |
| CVE-2019-14466 | MEDIUM | 6.5 | 1.0% | Dec 31, 2019 | The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote ... |
| CVE-2019-10227 | MEDIUM | 6.1 | 1.2% | Dec 31, 2019 | openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component. |
| CVE-2019-9668 | HIGH | 7.5 | 1.7% | Dec 31, 2019 | An issue was discovered in rovinbhandari FTP through 2012-03-28. receive_file in file_transfer_functions.c allows remote... |
| CVE-2019-9556 | MEDIUM | 5.4 | 1.1% | Dec 31, 2019 | FiberHome an5506-04-f RP2669 devices have XSS. |
| CVE-2019-9554 | MEDIUM | 6.1 | 2.6% | Dec 31, 2019 | In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at... |
| CVE-2019-9553 | MEDIUM | 6.1 | 1.8% | Dec 31, 2019 | Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now