2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20916 | HIGH | 7.5 | 3.0% | Sep 4, 2020 | The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a C... |
| CVE-2019-3881 | HIGH | 7.8 | 0.5% | Sep 4, 2020 | Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gem... |
| CVE-2019-10679 | HIGH | 7.8 | 0.5% | Sep 3, 2020 | Thomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file because of weak %PROGRAMFIL... |
| CVE-2019-5645 | HIGH | 7.5 | 41.7% | Sep 1, 2020 | By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register ... |
| CVE-2019-5321 | HIGH | 8.8 | 2.4% | Aug 26, 2020 | Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08... |
| CVE-2019-4713 | HIGH | 8.8 | 2.6% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary com... |
| CVE-2019-4698 | HIGH | 7.5 | 0.8% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default,... |
| CVE-2019-4689 | HIGH | 7.5 | 0.6% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, cause... |
| CVE-2019-14904 | HIGH | 7.3 | 0.4% | Aug 26, 2020 | A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on th... |
| CVE-2019-11862 | HIGH | 8.4 | 0.7% | Aug 21, 2020 | The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying. |
| CVE-2019-11859 | HIGH | 8.8 | 2.0% | Aug 21, 2020 | A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as ro... |
| CVE-2019-11858 | HIGH | 7.2 | 1.1% | Aug 21, 2020 | Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9. |
| CVE-2019-11853 | HIGH | 7.2 | 1.2% | Aug 21, 2020 | Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4... |
| CVE-2019-11848 | HIGH | 7.2 | 1.1% | Aug 21, 2020 | An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length check... |
| CVE-2019-11847 | HIGH | 7.8 | 0.4% | Aug 21, 2020 | An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user ca... |
| CVE-2019-19643 | HIGH | 7.5 | 1.4% | Aug 14, 2020 | ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service. |
| CVE-2019-20383 | HIGH | 7.8 | 0.5% | Aug 13, 2020 | ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges... |
| CVE-2019-17339 | HIGH | 8.1 | 0.8% | Aug 11, 2020 | The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically all... |
| CVE-2019-19704 | HIGH | 7.5 | 1.3% | Aug 8, 2020 | In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm. |
| CVE-2019-7005 | HIGH | 7.5 | 1.2% | Aug 7, 2020 | A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthen... |
| CVE-2019-20001 | HIGH | 7.8 | 0.3% | Aug 4, 2020 | An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to es... |
| CVE-2019-19455 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in ... |
| CVE-2019-14130 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in S... |
| CVE-2019-14124 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Co... |
| CVE-2019-14123 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HL... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now