2019 CVE Vulnerabilities
17,619 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25528 | CRITICAL | 9.1 | 0.4% | Mar 12, 2026 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to m... |
| CVE-2019-25527 | CRITICAL | 9.1 | 0.4% | Mar 12, 2026 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to m... |
| CVE-2019-25526 | CRITICAL | 9.1 | 0.3% | Mar 12, 2026 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to m... |
| CVE-2019-25525 | CRITICAL | 9.1 | 0.4% | Mar 12, 2026 | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to m... |
| CVE-2019-25524 | CRITICAL | 9.1 | 0.4% | Mar 12, 2026 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q... |
| CVE-2019-25523 | CRITICAL | 9.1 | 0.4% | Mar 12, 2026 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q... |
| CVE-2019-25522 | CRITICAL | 9.1 | 0.4% | Mar 12, 2026 | XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate dat... |
| CVE-2019-25521 | CRITICAL | 9.1 | 0.3% | Mar 12, 2026 | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q... |
| CVE-2019-25520 | CRITICAL | 9.8 | 0.4% | Mar 12, 2026 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel th... |
| CVE-2019-25515 | CRITICAL | 9.8 | 1.1% | Mar 12, 2026 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administratio... |
| CVE-2019-25514 | CRITICAL | 9.8 | 0.5% | Mar 12, 2026 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malici... |
| CVE-2019-25513 | CRITICAL | 9.8 | 0.6% | Mar 12, 2026 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers ... |
| CVE-2019-25510 | CRITICAL | 9.8 | 0.5% | Mar 12, 2026 | Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel th... |
| CVE-2019-25488 | CRITICAL | 9.8 | 0.4% | Mar 12, 2026 | Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauth... |
| CVE-2019-25487 | CRITICAL | 9.8 | 8.4% | Mar 11, 2026 | SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execut... |
| CVE-2019-25471 | CRITICAL | 9.8 | 0.9% | Mar 11, 2026 | FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sen... |
| CVE-2019-25468 | CRITICAL | 9.8 | 0.8% | Mar 11, 2026 | NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute ... |
| CVE-2019-25506 | CRITICAL | 9.8 | 0.5% | Mar 4, 2026 | FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthent... |
| CVE-2019-25499 | CRITICAL | 9.8 | 0.5% | Mar 4, 2026 | Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q... |
| CVE-2019-25489 | CRITICAL | 9.1 | 0.4% | Feb 27, 2026 | Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries... |
| CVE-2019-25459 | CRITICAL | 9.8 | 0.4% | Feb 22, 2026 | Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers ... |
| CVE-2019-25458 | CRITICAL | 9.8 | 0.5% | Feb 22, 2026 | Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate d... |
| CVE-2019-25456 | CRITICAL | 9.1 | 0.5% | Feb 22, 2026 | Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database ... |
| CVE-2019-25441 | CRITICAL | 9.8 | 8.5% | Feb 20, 2026 | thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary syst... |
| CVE-2019-25444 | CRITICAL | 9.1 | 0.4% | Feb 20, 2026 | Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now