2019 CVE Vulnerabilities

17,619 CVEs published in 2019.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2019-25675HIGH7.5eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator ...
CVE-2019-25673HIGH8.8UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenti...
CVE-2019-25672HIGH8.2PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database quer...
CVE-2019-25671HIGH8.8VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary com...
CVE-2019-25670HIGH7.8River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local a...
CVE-2019-25669HIGH8.2qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL c...
CVE-2019-25668HIGH8.2News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da...
CVE-2019-25664HIGH7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView...
CVE-2019-25663HIGH7.1SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database querie...
CVE-2019-25662HIGH7.5ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL...
CVE-2019-25656HIGH8.6R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to...
CVE-2019-25654HIGH8.7Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplyin...
CVE-2019-25652HIGH7.7UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification ...
CVE-2019-25650HIGH8.6River Past CamDo 3.7.6 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local att...
CVE-2019-25647HIGH8.8PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attac...
CVE-2019-25643HIGH8.8eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute ar...
CVE-2019-25642HIGH8.8Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary...
CVE-2019-25641HIGH8.8Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate data...
CVE-2019-25640HIGH8.8Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate databas...
CVE-2019-25639HIGH8.8Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to ...
CVE-2019-25638HIGH7.1Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute...
CVE-2019-25637HIGH8.6X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code ...
CVE-2019-25636HIGH8.2Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database...
CVE-2019-25635HIGH8.8Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate...
CVE-2019-25634HIGH7.8Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitra...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now