2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25371 | MEDIUM | 6.1 | 0.2% | Feb 15, 2026 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject ma... |
| CVE-2019-25370 | MEDIUM | 6.1 | 0.2% | Feb 15, 2026 | OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts ... |
| CVE-2019-25369 | MEDIUM | 5.4 | 0.2% | Feb 15, 2026 | OPNsense 19.1 contains a stored cross-site scripting vulnerability in the system_advanced_sysctl.php endpoint that allow... |
| CVE-2019-25368 | MEDIUM | 5.4 | 0.1% | Feb 15, 2026 | OPNsense 19.1 contains multiple cross-site scripting vulnerabilities in the diag_backup.php endpoint that allow attacker... |
| CVE-2019-25367 | MEDIUM | 5.4 | 0.2% | Feb 15, 2026 | ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin inte... |
| CVE-2019-25342 | HIGH | 7.5 | 0.4% | Feb 12, 2026 | Centova Cast 3.2.12 contains a denial of service vulnerability that allows attackers to overwhelm the system by repeated... |
| CVE-2019-25341 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | iNetTools for iOS 8.20 contains a denial of service vulnerability in the Whois feature that allows attackers to crash th... |
| CVE-2019-25340 | HIGH | 7.5 | 0.4% | Feb 12, 2026 | SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to c... |
| CVE-2019-25339 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | GHIA CamIP 1.2 for iOS contains a denial of service vulnerability in the password input field that allows attackers to c... |
| CVE-2019-25338 | MEDIUM | 6.9 | 0.4% | Feb 12, 2026 | DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attac... |
| CVE-2019-25337 | CRITICAL | 9.8 | 0.4% | Feb 12, 2026 | OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by m... |
| CVE-2019-25336 | HIGH | 7.8 | 0.2% | Feb 12, 2026 | SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attac... |
| CVE-2019-25335 | HIGH | 8.8 | 0.3% | Feb 12, 2026 | PRO-7070 Hazır Profesyonel Web Sitesi version 1.0 contains an authentication bypass vulnerability in the administration ... |
| CVE-2019-25334 | MEDIUM | 5.5 | 0.2% | Feb 12, 2026 | Product Key Explorer 4.2.0.0 contains a denial of service vulnerability that allows local attackers to crash the applica... |
| CVE-2019-25333 | HIGH | 8.7 | 0.6% | Feb 12, 2026 | Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to ... |
| CVE-2019-25332 | HIGH | 8.4 | 0.3% | Feb 12, 2026 | FTP Commander Pro 8.03 contains a local stack overflow vulnerability that allows attackers to execute arbitrary code by ... |
| CVE-2019-25331 | HIGH | 8.4 | 0.1% | Feb 12, 2026 | AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU regi... |
| CVE-2019-25330 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | SurfOffline Professional 2.2.0.103 contains a structured exception handler (SEH) overflow vulnerability that allows atta... |
| CVE-2019-25329 | HIGH | 7.5 | 0.4% | Feb 12, 2026 | FTP Navigator 8.03 contains a denial of service vulnerability that allows attackers to crash the application by overwrit... |
| CVE-2019-25328 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | XnConvert 1.82 contains a denial of service vulnerability in its registration code input field that allows attackers to ... |
| CVE-2019-25327 | CRITICAL | 9.8 | 0.5% | Feb 12, 2026 | Prime95 version 29.8 build 6 contains a buffer overflow vulnerability in the user ID input field that allows remote atta... |
| CVE-2019-25325 | HIGH | 8.8 | 0.3% | Feb 12, 2026 | Thrive Smart Home 1.1 contains an SQL injection vulnerability in the checklogin.php endpoint that allows unauthenticated... |
| CVE-2019-25324 | MEDIUM | 6.1 | 0.2% | Feb 12, 2026 | RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allow... |
| CVE-2019-25323 | MEDIUM | 6.1 | 0.2% | Feb 12, 2026 | Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page that allows attackers to... |
| CVE-2019-25322 | CRITICAL | 9.3 | 0.3% | Feb 12, 2026 | Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable a... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now