2019 CVE Vulnerabilities
17,620 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-6497 | — | — | 1.0% | Jan 20, 2019 | Hotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter. |
| CVE-2019-6496 | — | — | 6.6% | Jan 20, 2019 | The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, all... |
| CVE-2019-3774 | — | — | 3.0% | Jan 18, 2019 | Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injec... |
| CVE-2019-3772 | — | — | 3.0% | Jan 18, 2019 | Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older... |
| CVE-2019-6488 | — | — | 0.4% | Jan 18, 2019 | The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incor... |
| CVE-2019-3910 | — | — | 8.6% | Jan 18, 2019 | Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi scri... |
| CVE-2019-3909 | — | — | 2.3% | Jan 18, 2019 | Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials withou... |
| CVE-2019-6487 | — | — | 8.5% | Jan 18, 2019 | TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login)... |
| CVE-2019-0647 | — | — | 4.6% | Jan 17, 2019 | An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as ... |
| CVE-2019-0646 | — | — | 1.5% | Jan 17, 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i... |
| CVE-2019-0624 | — | — | 1.5% | Jan 17, 2019 | A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted req... |
| CVE-2019-2556 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2555 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2554 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2553 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2552 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2550 | — | — | 1.2% | Jan 16, 2019 | Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: L... |
| CVE-2019-2549 | — | — | 1.1% | Jan 16, 2019 | Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: L... |
| CVE-2019-2548 | — | — | 0.8% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2547 | — | — | 1.0% | Jan 16, 2019 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.... |
| CVE-2019-2546 | — | — | 1.2% | Jan 16, 2019 | Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Su... |
| CVE-2019-2545 | — | — | 0.4% | Jan 16, 2019 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported v... |
| CVE-2019-2544 | — | — | 0.4% | Jan 16, 2019 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported ver... |
| CVE-2019-2543 | — | — | 1.7% | Jan 16, 2019 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported ver... |
| CVE-2019-2541 | — | — | 0.9% | Jan 16, 2019 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). The supp... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now