2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2019-25691HIGH8.6Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attac...
CVE-2019-25689HIGH7.8HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code ...
CVE-2019-25690HIGH8.2Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injec...
CVE-2019-25686HIGH8.7Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attack...
CVE-2019-25684HIGH8.2OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database qu...
CVE-2019-25681HIGH7.8Xlight FTP Server 3.9.1 contains a structured exception handler (SEH) overwrite vulnerability that allows local attacker...
CVE-2019-25679HIGH8.5RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Ec...
CVE-2019-25678HIGH7.5C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated a...
CVE-2019-25675HIGH7.5eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator ...
CVE-2019-25673HIGH8.8UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenti...
CVE-2019-25672HIGH8.2PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database quer...
CVE-2019-25671HIGH8.8VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary com...
CVE-2019-25670HIGH7.8River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local a...
CVE-2019-25669HIGH8.2qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL c...
CVE-2019-25668HIGH8.2News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da...
CVE-2019-25664HIGH7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView...
CVE-2019-25663HIGH7.1SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database querie...
CVE-2019-25662HIGH7.5ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL...
CVE-2019-25656HIGH8.6R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to...
CVE-2019-25654HIGH8.7Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplyin...
CVE-2019-25652HIGH7.7UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification ...
CVE-2019-25650HIGH8.6River Past CamDo 3.7.6 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local att...
CVE-2019-25647HIGH8.8PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attac...
CVE-2019-25643HIGH8.8eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute ar...
CVE-2019-25642HIGH8.8Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now