2019 CVE Vulnerabilities
17,620 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-11086 | MEDIUM | 6.8 | 0.4% | Dec 18, 2019 | Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to ... |
| CVE-2019-0169 | HIGH | 8.8 | 0.8% | Dec 18, 2019 | Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before ve... |
| CVE-2019-0168 | MEDIUM | 4.4 | 0.3% | Dec 18, 2019 | Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) ... |
| CVE-2019-0166 | HIGH | 7.5 | 1.4% | Dec 18, 2019 | Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 ... |
| CVE-2019-0165 | MEDIUM | 4.4 | 0.3% | Dec 18, 2019 | Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a... |
| CVE-2019-0131 | HIGH | 8.1 | 0.6% | Dec 18, 2019 | Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may a... |
| CVE-2019-5487 | MEDIUM | 5.3 | 1.4% | Dec 18, 2019 | An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group sear... |
| CVE-2019-5486 | HIGH | 8.8 | 1.5% | Dec 18, 2019 | A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login i... |
| CVE-2019-5469 | MEDIUM | 6.5 | 0.8% | Dec 18, 2019 | An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archi... |
| CVE-2019-5080 | CRITICAL | 9.1 | 1.6% | Dec 18, 2019 | An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 ... |
| CVE-2019-5079 | CRITICAL | 9.8 | 3.3% | Dec 18, 2019 | An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC20... |
| CVE-2019-5078 | CRITICAL | 9.1 | 1.7% | Dec 18, 2019 | An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 F... |
| CVE-2019-5075 | CRITICAL | 9.8 | 3.9% | Dec 18, 2019 | An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 F... |
| CVE-2019-5073 | MEDIUM | 5.3 | 1.6% | Dec 18, 2019 | An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC20... |
| CVE-2019-1387 | HIGH | 8.8 | 4.4% | Dec 18, 2019 | An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.... |
| CVE-2019-19724 | HIGH | 7.5 | 1.2% | Dec 18, 2019 | Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to ... |
| CVE-2019-18997 | HIGH | 7.5 | 1.5% | Dec 18, 2019 | The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work f... |
| CVE-2019-18996 | HIGH | 7.8 | 0.4% | Dec 18, 2019 | Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside o... |
| CVE-2019-18995 | MEDIUM | 5.3 | 2.1% | Dec 18, 2019 | The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-l... |
| CVE-2019-18994 | MEDIUM | 6.5 | 0.6% | Dec 18, 2019 | Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlie... |
| CVE-2019-18573 | HIGH | 8.8 | 1.0% | Dec 18, 2019 | The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a Ses... |
| CVE-2019-18572 | CRITICAL | 9.8 | 2.0% | Dec 18, 2019 | The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Im... |
| CVE-2019-18571 | MEDIUM | 5.4 | 0.5% | Dec 18, 2019 | The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a ref... |
| CVE-2019-15600 | HIGH | 7.5 | 2.5% | Dec 18, 2019 | A Path traversal exists in http_server which allows an attacker to read arbitrary system files. |
| CVE-2019-15599 | CRITICAL | 9.8 | 2.7% | Dec 18, 2019 | A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now