2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-12520 | HIGH | 7.5 | 3.9% | Apr 15, 2020 | An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can se... |
| CVE-2019-20659 | HIGH | 7.2 | 1.9% | Apr 15, 2020 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400v2 before 1.0.4.84... |
| CVE-2019-20657 | HIGH | 8 | 1.0% | Apr 15, 2020 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6200 before 1.1.00.36,... |
| CVE-2019-20656 | HIGH | 8.8 | 0.4% | Apr 15, 2020 | Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74... |
| CVE-2019-20655 | HIGH | 7.8 | 0.6% | Apr 15, 2020 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR500 before 2.3.2.56 a... |
| CVE-2019-20654 | HIGH | 7.5 | 0.9% | Apr 15, 2020 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4... |
| CVE-2019-20650 | HIGH | 7.5 | 1.1% | Apr 15, 2020 | Certain NETGEAR devices are affected by denial of service. This affects R8900 before 1.0.5.2, R9000 before 1.0.5.2, XR50... |
| CVE-2019-20649 | HIGH | 7.5 | 1.0% | Apr 15, 2020 | NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information. |
| CVE-2019-20643 | HIGH | 7.5 | 0.8% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information. |
| CVE-2019-20642 | HIGH | 8 | 0.5% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass. |
| CVE-2019-20641 | HIGH | 8.8 | 0.8% | Apr 15, 2020 | NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. |
| CVE-2019-20640 | HIGH | 8.8 | 0.6% | Apr 15, 2020 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600... |
| CVE-2019-2880 | HIGH | 8.8 | 1.5% | Apr 15, 2020 | Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications (component: Security... |
| CVE-2019-20767 | HIGH | 7.2 | 1.1% | Apr 15, 2020 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor... |
| CVE-2019-19301 | HIGH | 7.5 | 1.3% | Apr 14, 2020 | A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X2... |
| CVE-2019-19300 | HIGH | 7.5 | 1.5% | Apr 14, 2020 | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation... |
| CVE-2019-14326 | HIGH | 7.8 | 1.3% | Apr 14, 2020 | An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh (ports 22 and 23) ... |
| CVE-2019-18822 | HIGH | 8.8 | 1.4% | Apr 14, 2020 | A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e., the account under which... |
| CVE-2019-11480 | HIGH | 8.1 | 0.5% | Apr 14, 2020 | The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options whe... |
| CVE-2019-13916 | HIGH | 8.8 | 1.2% | Apr 13, 2020 | An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low En... |
| CVE-2019-20637 | HIGH | 7.5 | 1.7% | Apr 8, 2020 | An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does... |
| CVE-2019-15789 | HIGH | 7.8 | 0.5% | Apr 8, 2020 | Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to th... |
| CVE-2019-17657 | HIGH | 7.5 | 2.4% | Apr 7, 2020 | An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer ... |
| CVE-2019-13559 | HIGH | 7.8 | 0.3% | Apr 7, 2020 | GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the cont... |
| CVE-2019-13554 | HIGH | 8.8 | 1.0% | Apr 7, 2020 | GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using g... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now