2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14712 | HIGH | 7.8 | 0.3% | Oct 23, 2020 | Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generat... |
| CVE-2019-14711 | HIGH | 7 | 0.2% | Oct 23, 2020 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass. |
| CVE-2019-17007 | HIGH | 7.5 | 1.4% | Oct 22, 2020 | In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in... |
| CVE-2019-9080 | HIGH | 7.5 | 0.7% | Oct 20, 2020 | DomainMOD before 4.14.0 uses MD5 without a salt for password storage. |
| CVE-2019-4680 | HIGH | 8.8 | 1.0% | Oct 20, 2020 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker c... |
| CVE-2019-2194 | HIGH | 7.8 | 0.1% | Oct 14, 2020 | In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casti... |
| CVE-2019-19115 | HIGH | 7.8 | 0.6% | Oct 8, 2020 | An escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2, 1.5.0, 1.5.1, 1.6.1 and 1.6.2 a... |
| CVE-2019-4545 | HIGH | 7.5 | 2.1% | Oct 8, 2020 | IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attack... |
| CVE-2019-16160 | HIGH | 7.5 | 2.5% | Oct 7, 2020 | An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to cra... |
| CVE-2019-4326 | HIGH | 7.5 | 1.1% | Oct 6, 2020 | "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Stri... |
| CVE-2019-19200 | HIGH | 8.8 | 1.7% | Oct 6, 2020 | REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users. |
| CVE-2019-14557 | HIGH | 8 | 0.5% | Oct 5, 2020 | Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5... |
| CVE-2019-19199 | HIGH | 7.4 | 1.1% | Oct 2, 2020 | REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout... |
| CVE-2019-20902 | HIGH | 7.5 | 0.9% | Oct 1, 2020 | Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from befor... |
| CVE-2019-20922 | HIGH | 7.5 | 3.8% | Sep 30, 2020 | Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be... |
| CVE-2019-20920 | HIGH | 8.1 | 3.2% | Sep 30, 2020 | Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to prope... |
| CVE-2019-16212 | HIGH | 8.8 | 1.3% | Sep 25, 2020 | A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP ... |
| CVE-2019-7178 | HIGH | 7.2 | 1.5% | Sep 25, 2020 | Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup. |
| CVE-2019-7177 | HIGH | 7.2 | 1.4% | Sep 25, 2020 | Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin. |
| CVE-2019-1947 | HIGH | 8.6 | 1.9% | Sep 23, 2020 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA... |
| CVE-2019-1888 | HIGH | 7.2 | 3.4% | Sep 23, 2020 | A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an... |
| CVE-2019-16023 | HIGH | 7.5 | 1.3% | Sep 23, 2020 | Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cis... |
| CVE-2019-16021 | HIGH | 7.5 | 1.5% | Sep 23, 2020 | Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cis... |
| CVE-2019-16019 | HIGH | 8.6 | 1.3% | Sep 23, 2020 | Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cis... |
| CVE-2019-16009 | HIGH | 8.8 | 1.0% | Sep 23, 2020 | A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now