2019 CVE Vulnerabilities
17,620 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-10871 | — | — | 2.5% | Apr 5, 2019 | An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPage... |
| CVE-2019-10867 | — | — | 69.4% | Apr 4, 2019 | An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/c... |
| CVE-2019-10863 | — | — | 13.4% | Apr 4, 2019 | A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows on... |
| CVE-2019-10856 | — | — | 1.3% | Apr 4, 2019 | In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomp... |
| CVE-2019-10292 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation m... |
| CVE-2019-10289 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.... |
| CVE-2019-10278 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnec... |
| CVE-2019-10273 | — | — | 7.8% | Apr 4, 2019 | Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticat... |
| CVE-2019-1003098 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValid... |
| CVE-2019-1003092 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection for... |
| CVE-2019-1003090 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doVa... |
| CVE-2019-1003086 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl... |
| CVE-2019-1003084 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTe... |
| CVE-2019-1003082 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form va... |
| CVE-2019-1003080 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicati... |
| CVE-2019-1003078 | — | — | 0.7% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#... |
| CVE-2019-1003076 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doT... |
| CVE-2019-1003058 | — | — | 1.3% | Apr 4, 2019 | A cross-site request forgery vulnerability in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginChe... |
| CVE-2019-5022 | — | — | — | Apr 4, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate is not about any specific pr... |
| CVE-2019-10844 | — | — | 1.6% | Apr 4, 2019 | nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environm... |
| CVE-2019-10842 | — | — | 4.9% | Apr 4, 2019 | Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org... |
| CVE-2019-10723 | — | — | 1.0% | Apr 3, 2019 | An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted exces... |
| CVE-2019-10268 | — | — | — | Apr 3, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-5423 | — | — | 2.8% | Apr 3, 2019 | Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on th... |
| CVE-2019-5422 | — | — | 1.2% | Apr 3, 2019 | XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attac... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now