2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25254 | HIGH | 8.8 | 0.3% | Dec 24, 2025 | KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administr... |
| CVE-2019-25253 | HIGH | 7.5 | 0.8% | Dec 24, 2025 | KYOCERA Net Admin 3.4.0906 contains an XML External Entity (XXE) injection vulnerability in the Multi-Set Template Edito... |
| CVE-2019-25252 | MEDIUM | 5.1 | 0.2% | Dec 24, 2025 | Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrati... |
| CVE-2019-25251 | MEDIUM | 6.9 | 0.3% | Dec 24, 2025 | Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows att... |
| CVE-2019-25250 | MEDIUM | 5.3 | 0.1% | Dec 24, 2025 | Devolo dLAN 500 AV Wireless+ 3.1.0-1 contains a cross-site request forgery vulnerability that allows attackers to perfor... |
| CVE-2019-25249 | CRITICAL | 9.8 | 0.4% | Dec 24, 2025 | devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hid... |
| CVE-2019-25248 | HIGH | 8.7 | 0.4% | Dec 24, 2025 | Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video st... |
| CVE-2019-25247 | MEDIUM | 5.3 | 0.1% | Dec 24, 2025 | Beward N100 H.264 VGA IP Camera M2.1.6 contains a cross-site request forgery vulnerability that allows attackers to perf... |
| CVE-2019-25246 | HIGH | 8.8 | 17.4% | Dec 24, 2025 | Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to ... |
| CVE-2019-25245 | HIGH | 8.8 | 0.2% | Dec 24, 2025 | Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify e... |
| CVE-2019-25244 | MEDIUM | 5.3 | 0.2% | Dec 24, 2025 | Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform adminis... |
| CVE-2019-25243 | HIGH | 8.8 | 2.3% | Dec 24, 2025 | FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php sc... |
| CVE-2019-25242 | MEDIUM | 5.1 | 0.2% | Dec 24, 2025 | FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that allows attackers to perf... |
| CVE-2019-25241 | CRITICAL | 9.8 | 0.7% | Dec 24, 2025 | FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials ... |
| CVE-2019-25240 | CRITICAL | 9.8 | 0.4% | Dec 24, 2025 | Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access t... |
| CVE-2019-25239 | HIGH | 8.7 | 0.4% | Dec 24, 2025 | V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers... |
| CVE-2019-25238 | MEDIUM | 5.1 | 0.1% | Dec 24, 2025 | V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform a... |
| CVE-2019-25237 | CRITICAL | 9.8 | 0.3% | Dec 24, 2025 | V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain admini... |
| CVE-2019-25236 | CRITICAL | 9.8 | 0.4% | Dec 24, 2025 | iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script that allows unauthorized a... |
| CVE-2019-25235 | CRITICAL | 9.8 | 0.4% | Dec 24, 2025 | Smartwares HOME easy 1.0.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to acce... |
| CVE-2019-25234 | MEDIUM | 5.3 | 0.1% | Dec 24, 2025 | SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allo... |
| CVE-2019-25233 | MEDIUM | 5.3 | 0.2% | Dec 24, 2025 | AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers ... |
| CVE-2019-25230 | MEDIUM | 4.3 | 0.2% | Dec 18, 2025 | An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects... |
| CVE-2019-25229 | HIGH | 8.8 | 0.3% | Dec 18, 2025 | An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions t... |
| CVE-2019-25228 | MEDIUM | 5.3 | 0.3% | Dec 18, 2025 | An information disclosure vulnerability in Kentico Xperience allows attackers to leak virtual context URLs via the HTTP ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now