2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25222 | MEDIUM | 4.9 | 0.4% | Mar 15, 2025 | The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions... |
| CVE-2019-1815 | MEDIUM | 5.3 | 0.3% | Mar 4, 2025 | A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security ... |
| CVE-2019-8900 | MEDIUM | 6.8 | 67.1% | Feb 21, 2025 | A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute ... |
| CVE-2019-15002 | MEDIUM | 4.3 | 0.3% | Feb 11, 2025 | An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require... |
| CVE-2019-15690 | HIGH | 8.8 | 0.7% | Jan 24, 2025 | LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() funct... |
| CVE-2019-3309 | — | — | — | Jan 16, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is mistakenly publ... |
| CVE-2019-2483 | HIGH | 8.2 | 0.4% | Dec 24, 2024 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th... |
| CVE-2019-25221 | MEDIUM | 4.9 | 0.5% | Dec 13, 2024 | The Responsive Filterable Portfolio plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all ve... |
| CVE-2019-17082 | CRITICAL | 9 | 0.4% | Nov 26, 2024 | Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on ... |
| CVE-2019-25220 | HIGH | 7.5 | 0.8% | Nov 18, 2024 | Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-diffic... |
| CVE-2019-20472 | MEDIUM | 6.2 | 0.3% | Nov 7, 2024 | An issue was discovered on One2Track 2019-12-08 devices. Any SIM card used with the device cannot have a PIN configured.... |
| CVE-2019-20469 | MEDIUM | 4.6 | 0.3% | Nov 7, 2024 | An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch... |
| CVE-2019-20462 | MEDIUM | 5.3 | 0.3% | Nov 7, 2024 | An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial interface at the board leve... |
| CVE-2019-20461 | CRITICAL | 9.8 | 0.9% | Nov 7, 2024 | An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control... |
| CVE-2019-20460 | HIGH | 8.8 | 0.2% | Nov 7, 2024 | An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tok... |
| CVE-2019-20459 | HIGH | 8.4 | 0.3% | Nov 7, 2024 | An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all value... |
| CVE-2019-20458 | HIGH | 8.8 | 0.4% | Nov 7, 2024 | An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes (and functions... |
| CVE-2019-20457 | CRITICAL | 9.1 | 0.7% | Nov 7, 2024 | An issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface password hash can be retr... |
| CVE-2019-25219 | HIGH | 7.5 | 0.5% | Oct 29, 2024 | Asio C++ Library before 1.13.0 lacks a fallback error code in the case of SSL_ERROR_SYSCALL with no associated error inf... |
| CVE-2019-25218 | MEDIUM | 4.9 | 0.5% | Oct 19, 2024 | The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to SQL Injection via the 'id' par... |
| CVE-2019-25217 | CRITICAL | 9.8 | 0.8% | Oct 16, 2024 | The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and... |
| CVE-2019-25216 | MEDIUM | 6.1 | 0.5% | Oct 16, 2024 | The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the POST body 'update' parameter i... |
| CVE-2019-25215 | HIGH | 7.3 | 0.4% | Oct 16, 2024 | The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in near... |
| CVE-2019-25214 | MEDIUM | 6.1 | 0.3% | Oct 16, 2024 | The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST ... |
| CVE-2019-25213 | HIGH | 7.5 | 2.7% | Oct 16, 2024 | The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to,... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now