2019 CVE Vulnerabilities
17,621 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-8145 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8132 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8233 | MEDIUM | 6.1 | 0.7% | Nov 6, 2019 | In Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an unauthenticated user can inject arbitrary Jav... |
| CVE-2019-8232 | MEDIUM | 6.6 | 0.9% | Nov 6, 2019 | In Magento prior to 1.9.4.3, Magento prior to 1.14.4.3, Magento 2.2 prior to 2.2.10, and Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8231 | HIGH | 7.2 | 1.4% | Nov 6, 2019 | In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing at... |
| CVE-2019-8230 | HIGH | 7.2 | 1.4% | Nov 6, 2019 | In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit ... |
| CVE-2019-8229 | HIGH | 7.2 | 1.4% | Nov 6, 2019 | In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit... |
| CVE-2019-8228 | MEDIUM | 4.8 | 0.5% | Nov 6, 2019 | in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges ... |
| CVE-2019-8227 | MEDIUM | 4.8 | 0.5% | Nov 6, 2019 | In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges ... |
| CVE-2019-8159 | HIGH | 8.8 | 3.3% | Nov 6, 2019 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An ... |
| CVE-2019-8155 | HIGH | 7.5 | 0.5% | Nov 6, 2019 | Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be e... |
| CVE-2019-8154 | HIGH | 8.8 | 1.9% | Nov 6, 2019 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An ... |
| CVE-2019-8153 | MEDIUM | 6.1 | 1.5% | Nov 6, 2019 | A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.... |
| CVE-2019-8152 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prio... |
| CVE-2019-8151 | HIGH | 7.2 | 1.7% | Nov 6, 2019 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An ... |
| CVE-2019-8150 | HIGH | 8.8 | 1.9% | Nov 6, 2019 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An ... |
| CVE-2019-8149 | CRITICAL | 9.8 | 2.1% | Nov 6, 2019 | Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to... |
| CVE-2019-8148 | MEDIUM | 4.8 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated adm... |
| CVE-2019-8147 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8146 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8144 | CRITICAL | 9.8 | 2.5% | Nov 6, 2019 | A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can inse... |
| CVE-2019-8143 | MEDIUM | 6.5 | 0.9% | Nov 6, 2019 | A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti... |
| CVE-2019-8142 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8141 | HIGH | 7.2 | 2.4% | Nov 6, 2019 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 pr... |
| CVE-2019-8140 | MEDIUM | 4.9 | 0.8% | Nov 6, 2019 | An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now