2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-25321CRITICAL9.8FTP Navigator 8.03 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwritin...
CVE-2019-25320HIGH8.8E Learning Script 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard with...
CVE-2019-25319CRITICAL9.8Domain Quester Pro 6.02 contains a stack overflow vulnerability that allows remote attackers to execute arbitrary code b...
CVE-2019-25318HIGH8.8AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by...
CVE-2019-25348——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-25347HIGH7.5thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating ...
CVE-2019-25346HIGH7.5TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the ...
CVE-2019-25345HIGH8.5Realtek IIS Codec Service 6.4.10041.133 contains an unquoted service path vulnerability that allows local attackers to p...
CVE-2019-25344HIGH8.5Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executa...
CVE-2019-25343HIGH8.5NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with...
CVE-2019-25313MEDIUM5.1FlexNet Publisher 11.12.1 contains a cross-site request forgery vulnerability that allows attackers to create administra...
CVE-2019-25317MEDIUM5.4Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into ...
CVE-2019-25316MEDIUM6.4GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject ma...
CVE-2019-25315MEDIUM6.4WordPress Server Log Viewer 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject...
CVE-2019-25314MEDIUM5.5Yoast Duplicate-Post WordPress Plugin 3.2.3 contains a persistent cross-site scripting vulnerability in plugin settings ...
CVE-2019-25312MEDIUM5.4InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated...
CVE-2019-25311MEDIUM5.4thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious...
CVE-2019-25310HIGH8.5ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that ...
CVE-2019-25309HIGH8.5Zilab Remote Console Server 3.2.9 contains an unquoted service path vulnerability that allows local attackers to potenti...
CVE-2019-25308HIGH8.5Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration....
CVE-2019-25307HIGH8.5WorkgroupMail 7.5.1 contains an unquoted service path vulnerability in its Windows service configuration that allows loc...
CVE-2019-25306HIGH8.5BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially e...
CVE-2019-25305HIGH8.5JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privi...
CVE-2019-25304HIGH8.5SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local user...
CVE-2019-25303HIGH7.1TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate databas...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now