2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25264 | MEDIUM | 6.4 | 0.2% | Feb 3, 2026 | Snipe-IT 4.7.5 contains a persistent cross-site scripting vulnerability that allows authorized users to upload malicious... |
| CVE-2019-25263 | MEDIUM | 6.4 | 0.2% | Feb 3, 2026 | Zendesk SweetHawk Survey 1.6 contains a persistent cross-site scripting vulnerability that allows attackers to inject ma... |
| CVE-2019-25261 | HIGH | 7.8 | 0.2% | Feb 3, 2026 | AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local att... |
| CVE-2019-25232 | CRITICAL | 9.8 | 0.4% | Jan 30, 2026 | NetPCLinker 1.0.0.0 contains a buffer overflow vulnerability in the Clients Control Panel DNS/IP field that allows attac... |
| CVE-2019-25297 | MEDIUM | 5.1 | 0.5% | Jan 16, 2026 | Poll, Survey & Quiz Maker Plugin by Opinion Stage Wordpress plugin versions prior to 19.6.25 contain a stored cross-site... |
| CVE-2019-25296 | CRITICAL | 9.8 | 0.6% | Jan 8, 2026 | The WP Cost Estimation plugin for WordPress is vulnerable to arbitrary file uploads and deletion due to missing file typ... |
| CVE-2019-25295 | MEDIUM | 6.5 | 0.5% | Jan 8, 2026 | The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the... |
| CVE-2019-25291 | CRITICAL | 9.3 | 0.4% | Jan 8, 2026 | INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that ca... |
| CVE-2019-25290 | MEDIUM | 6.9 | 0.3% | Jan 8, 2026 | Smartliving SmartLAN/G/SI <=6.x contains an unauthenticated server-side request forgery vulnerability in the GetImage fu... |
| CVE-2019-25289 | HIGH | 8.8 | 1.7% | Jan 8, 2026 | SmartLiving SmartLAN <=6.x contains an authenticated remote command injection vulnerability in the web.cgi binary throug... |
| CVE-2019-25284 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | V-SOL GPON/EPON OLT Platform v2.03 contains multiple reflected cross-site scripting vulnerabilities due to improper inpu... |
| CVE-2019-25282 | CRITICAL | 9.8 | 0.4% | Jan 8, 2026 | V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipu... |
| CVE-2019-25280 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML co... |
| CVE-2019-25279 | HIGH | 7.5 | 0.2% | Jan 8, 2026 | FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to acce... |
| CVE-2019-25278 | CRITICAL | 9.1 | 0.3% | Jan 8, 2026 | FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to i... |
| CVE-2019-25277 | MEDIUM | 6.1 | 0.3% | Jan 8, 2026 | FaceSentry Access Control System 6.4.8 contains a cross-site scripting vulnerability in the 'msg' parameter of pluginIns... |
| CVE-2019-25270 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | SOCA Access Control System 180612 contains a cross-site scripting vulnerability in the 'senddata' POST parameter of logg... |
| CVE-2019-25268 | CRITICAL | 9.8 | 0.4% | Jan 8, 2026 | NREL BEopt 2.8.0.0 contains a DLL hijacking vulnerability that allows attackers to load arbitrary libraries by tricking ... |
| CVE-2019-25259 | MEDIUM | 5.3 | 0.1% | Jan 8, 2026 | Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a cross-site request forgery vulnerability that allows attac... |
| CVE-2019-25231 | HIGH | 8.5 | 0.1% | Jan 8, 2026 | devolo dLAN Cockpit 4.3.1 contains an unquoted service path vulnerability in the 'DevoloNetworkService' that allows loca... |
| CVE-2019-25262 | MEDIUM | 5.1 | 0.2% | Dec 31, 2025 | A security vulnerability has been detected in elinicksic Razgover up to db37dfc5c82f023a40f2f7834ded6633fb2b5262. This a... |
| CVE-2019-25258 | HIGH | 7.5 | 1.0% | Dec 24, 2025 | LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers t... |
| CVE-2019-25257 | HIGH | 8.7 | 0.4% | Dec 24, 2025 | LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to... |
| CVE-2019-25256 | HIGH | 7.1 | 0.5% | Dec 24, 2025 | VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows atta... |
| CVE-2019-25255 | HIGH | 8.7 | 0.4% | Dec 24, 2025 | VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows at... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now