2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25287 | HIGH | 8.5 | 0.1% | Feb 5, 2026 | Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService th... |
| CVE-2019-25286 | HIGH | 8.5 | 0.1% | Feb 5, 2026 | GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentia... |
| CVE-2019-25285 | HIGH | 8.5 | 0.2% | Feb 5, 2026 | Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorServic... |
| CVE-2019-25283 | HIGH | 8.5 | 0.2% | Feb 5, 2026 | Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary... |
| CVE-2019-25281 | HIGH | 8.5 | 0.2% | Feb 5, 2026 | NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows loc... |
| CVE-2019-25276 | HIGH | 8.5 | 0.2% | Feb 5, 2026 | Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Servic... |
| CVE-2019-25275 | HIGH | 8.5 | 0.1% | Feb 5, 2026 | BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to poten... |
| CVE-2019-25274 | HIGH | 8.5 | 0.1% | Feb 5, 2026 | ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local at... |
| CVE-2019-25273 | HIGH | 8.5 | 0.1% | Feb 5, 2026 | Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attac... |
| CVE-2019-25272 | HIGH | 8.5 | 0.1% | Feb 5, 2026 | TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in the CCSrvProxy service that allows loca... |
| CVE-2019-25271 | HIGH | 8.5 | 0.3% | Feb 5, 2026 | NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configur... |
| CVE-2019-25269 | HIGH | 8.5 | 0.3% | Feb 5, 2026 | Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attacker... |
| CVE-2019-25267 | HIGH | 8.5 | 0.2% | Feb 5, 2026 | Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute... |
| CVE-2019-25260 | HIGH | 8.8 | 0.4% | Feb 3, 2026 | OXID eShop versions 6.x prior to 6.3.4 contains a SQL injection vulnerability in the 'sorting' parameter that allows att... |
| CVE-2019-25265 | MEDIUM | 6.4 | 0.3% | Feb 3, 2026 | Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the ... |
| CVE-2019-25264 | MEDIUM | 6.4 | 0.2% | Feb 3, 2026 | Snipe-IT 4.7.5 contains a persistent cross-site scripting vulnerability that allows authorized users to upload malicious... |
| CVE-2019-25263 | MEDIUM | 6.4 | 0.2% | Feb 3, 2026 | Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject ma... |
| CVE-2019-25261 | HIGH | 8.5 | 0.2% | Feb 3, 2026 | AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local att... |
| CVE-2019-25232 | CRITICAL | 9.8 | 0.4% | Jan 30, 2026 | NetPCLinker 1.0.0.0 contains a buffer overflow vulnerability in the Clients Control Panel DNS/IP field that allows attac... |
| CVE-2019-25297 | MEDIUM | 5.1 | 0.5% | Jan 16, 2026 | Poll, Survey & Quiz Maker Plugin by Opinion Stage Wordpress plugin versions prior to 19.6.25 contain a stored cross-site... |
| CVE-2019-25296 | CRITICAL | 9.8 | 0.6% | Jan 8, 2026 | The WP Cost Estimation plugin for WordPress is vulnerable to arbitrary file uploads and deletion due to missing file typ... |
| CVE-2019-25295 | MEDIUM | 6.5 | 0.5% | Jan 8, 2026 | The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the... |
| CVE-2019-25291 | CRITICAL | 9.3 | 0.4% | Jan 8, 2026 | INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that ca... |
| CVE-2019-25290 | MEDIUM | 6.9 | 0.3% | Jan 8, 2026 | Smartliving SmartLAN/G/SI <=6.x contains an unauthenticated server-side request forgery vulnerability in the GetImage fu... |
| CVE-2019-25289 | HIGH | 8.8 | 1.7% | Jan 8, 2026 | SmartLiving SmartLAN <=6.x contains an authenticated remote command injection vulnerability in the web.cgi binary throug... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now