2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-16476——Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16475——Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16474——Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16473——Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16472——Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim 2026-11-05
CVE-2019-16447HIGH7.8Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. Successful exploitation could lead ...
CVE-2019-25781HIGH7.5Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline link parsing that allows r...
CVE-2019-25779HIGH7.5WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitra...
CVE-2019-25778HIGH8.2SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate da...
CVE-2019-25777HIGH7.3YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead...
CVE-2019-25776HIGH7.5Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrar...
CVE-2019-25725——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-25715——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2019-25766HIGH7.5Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during certain G...
CVE-2019-25765HIGH7.5ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attack...
CVE-2019-25764HIGH7.3**UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a loca...
CVE-2019-25763CRITICAL9.8WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attacke...
CVE-2019-25762HIGH7.5Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attac...
CVE-2019-25761HIGH7.1Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute a...
CVE-2019-25760MEDIUM5.5Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to...
CVE-2019-25759HIGH7.1Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arb...
CVE-2019-25758HIGH8.8Joomla! Component vBizz 1.0.7 contains an unrestricted file upload vulnerability that allows authenticated attackers to ...
CVE-2019-25757HIGH7.1Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary ...
CVE-2019-25756HIGH8.2Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execut...
CVE-2019-25755HIGH8.2Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now