2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-4713 | HIGH | 8.8 | 2.6% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary com... |
| CVE-2019-4698 | HIGH | 7.5 | 0.8% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not require that users should have strong passwords by default,... |
| CVE-2019-4689 | HIGH | 7.5 | 0.6% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, cause... |
| CVE-2019-14904 | HIGH | 7.3 | 0.4% | Aug 26, 2020 | A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on th... |
| CVE-2019-11862 | HIGH | 8.4 | 0.7% | Aug 21, 2020 | The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying. |
| CVE-2019-11859 | HIGH | 8.8 | 2.0% | Aug 21, 2020 | A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as ro... |
| CVE-2019-11858 | HIGH | 7.2 | 1.1% | Aug 21, 2020 | Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9. |
| CVE-2019-11853 | HIGH | 7.2 | 1.2% | Aug 21, 2020 | Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4... |
| CVE-2019-11848 | HIGH | 7.2 | 1.1% | Aug 21, 2020 | An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length check... |
| CVE-2019-11847 | HIGH | 7.8 | 0.4% | Aug 21, 2020 | An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user ca... |
| CVE-2019-19643 | HIGH | 7.5 | 1.4% | Aug 14, 2020 | ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service. |
| CVE-2019-20383 | HIGH | 7.8 | 0.5% | Aug 13, 2020 | ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges... |
| CVE-2019-17339 | HIGH | 8.1 | 0.8% | Aug 11, 2020 | The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically all... |
| CVE-2019-19704 | HIGH | 7.5 | 1.3% | Aug 8, 2020 | In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm. |
| CVE-2019-7005 | HIGH | 7.5 | 1.2% | Aug 7, 2020 | A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthen... |
| CVE-2019-20001 | HIGH | 7.8 | 0.3% | Aug 4, 2020 | An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to es... |
| CVE-2019-19455 | HIGH | 7.8 | 0.4% | Aug 3, 2020 | Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in ... |
| CVE-2019-14130 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in S... |
| CVE-2019-14124 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Co... |
| CVE-2019-14123 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HL... |
| CVE-2019-14101 | HIGH | 7.1 | 0.2% | Jul 30, 2020 | Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is... |
| CVE-2019-14100 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdrago... |
| CVE-2019-14099 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdra... |
| CVE-2019-14093 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon ... |
| CVE-2019-14037 | HIGH | 7.8 | 0.2% | Jul 30, 2020 | Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Comput... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now