2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-16112 | HIGH | 8.8 | 11.4% | May 13, 2020 | TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java objec... |
| CVE-2019-5500 | HIGH | 7.5 | 1.8% | May 11, 2020 | Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthentic... |
| CVE-2019-19162 | HIGH | 7.8 | 1.2% | May 11, 2020 | A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system ru... |
| CVE-2019-14898 | HIGH | 7 | 0.4% | May 8, 2020 | The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw ... |
| CVE-2019-10170 | HIGH | 7.2 | 1.2% | May 8, 2020 | A flaw was found in the Keycloak admin console, where the realm management interface permits a script to be set via the ... |
| CVE-2019-10169 | HIGH | 7.2 | 1.3% | May 8, 2020 | A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy... |
| CVE-2019-19164 | HIGH | 8.8 | 0.8% | May 7, 2020 | dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remot... |
| CVE-2019-18872 | HIGH | 7.5 | 0.9% | May 7, 2020 | Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable password... |
| CVE-2019-18871 | HIGH | 8.8 | 2.5% | May 7, 2020 | A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authentic... |
| CVE-2019-18866 | HIGH | 7.5 | 1.2% | May 7, 2020 | Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allo... |
| CVE-2019-18864 | HIGH | 7.5 | 1.3% | May 7, 2020 | /server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain ... |
| CVE-2019-18867 | HIGH | 7.5 | 1.2% | May 7, 2020 | Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames a... |
| CVE-2019-19166 | HIGH | 7.8 | 0.4% | May 6, 2020 | Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows att... |
| CVE-2019-19517 | HIGH | 8.8 | 0.5% | May 5, 2020 | Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process. |
| CVE-2019-13285 | HIGH | 7.5 | 1.0% | May 4, 2020 | CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection. |
| CVE-2019-11823 | HIGH | 7.5 | 2.4% | May 4, 2020 | CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017-2 allows remote attack... |
| CVE-2019-12425 | HIGH | 7.5 | 4.7% | Apr 30, 2020 | Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host |
| CVE-2019-0235 | HIGH | 8.8 | 32.7% | Apr 30, 2020 | Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks. |
| CVE-2019-19220 | HIGH | 8.8 | 1.8% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2). |
| CVE-2019-19219 | HIGH | 7.5 | 1.1% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download. |
| CVE-2019-19218 | HIGH | 7.5 | 1.0% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage. |
| CVE-2019-19217 | HIGH | 8.8 | 1.8% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 allows OS Command Injection. |
| CVE-2019-19216 | HIGH | 8.8 | 1.1% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy. |
| CVE-2019-19215 | HIGH | 8.8 | 1.6% | Apr 30, 2020 | A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Cont... |
| CVE-2019-5621 | HIGH | 7.8 | 2.2% | Apr 29, 2020 | ABBS Software Audio Media Player version 3.1 suffers from an instance of CWE-121: Stack-based Buffer Overflow. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now