2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19144 | CRITICAL | 9.8 | 0.7% | Aug 1, 2025 | XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 (11449-53631 Build304) devices via rest/Users?act... |
| CVE-2019-19145 | MEDIUM | 5.8 | 0.3% | Aug 1, 2025 | Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65... |
| CVE-2019-25224 | CRITICAL | 9.8 | 16.7% | Jul 25, 2025 | The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldu... |
| CVE-2019-16536 | HIGH | 8.8 | 0.7% | May 21, 2025 | Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. |
| CVE-2019-25223 | MEDIUM | 4.9 | 0.3% | Apr 8, 2025 | The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in... |
| CVE-2019-16149 | MEDIUM | 6.1 | 0.3% | Mar 28, 2025 | An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attack... |
| CVE-2019-16151 | MEDIUM | 6.1 | 0.4% | Mar 21, 2025 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below, 6.2.9 ... |
| CVE-2019-6697 | MEDIUM | 6.1 | 0.3% | Mar 17, 2025 | An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 i... |
| CVE-2019-17659 | HIGH | 8.1 | 0.6% | Mar 17, 2025 | A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attack... |
| CVE-2019-15706 | MEDIUM | 5.4 | 0.4% | Mar 17, 2025 | An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, versio... |
| CVE-2019-25222 | MEDIUM | 4.9 | 0.4% | Mar 15, 2025 | The Thumbnail carousel slider plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions... |
| CVE-2019-1815 | MEDIUM | 5.3 | 0.3% | Mar 4, 2025 | A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security ... |
| CVE-2019-8900 | MEDIUM | 6.8 | 67.1% | Feb 21, 2025 | A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute ... |
| CVE-2019-15002 | MEDIUM | 4.3 | 0.3% | Feb 11, 2025 | An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require... |
| CVE-2019-15690 | HIGH | 8.8 | 0.7% | Jan 24, 2025 | LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() funct... |
| CVE-2019-3309 | — | — | — | Jan 16, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is mistakenly publ... |
| CVE-2019-2483 | HIGH | 8.2 | 0.4% | Dec 24, 2024 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th... |
| CVE-2019-25221 | MEDIUM | 4.9 | 0.5% | Dec 13, 2024 | The Responsive Filterable Portfolio plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all ve... |
| CVE-2019-17082 | CRITICAL | 9 | 0.4% | Nov 26, 2024 | Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on ... |
| CVE-2019-25220 | HIGH | 7.5 | 0.8% | Nov 18, 2024 | Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-diffic... |
| CVE-2019-20472 | MEDIUM | 6.2 | 0.3% | Nov 7, 2024 | An issue was discovered on One2Track 2019-12-08 devices. Any SIM card used with the device cannot have a PIN configured.... |
| CVE-2019-20469 | MEDIUM | 4.6 | 0.3% | Nov 7, 2024 | An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch... |
| CVE-2019-20462 | MEDIUM | 5.3 | 0.3% | Nov 7, 2024 | An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial interface at the board leve... |
| CVE-2019-20461 | CRITICAL | 9.8 | 0.9% | Nov 7, 2024 | An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control... |
| CVE-2019-20460 | HIGH | 8.8 | 0.2% | Nov 7, 2024 | An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tok... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now