2019 CVE Vulnerabilities
17,623 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-17579 | MEDIUM | 6.1 | 0.7% | Oct 14, 2019 | SonarSource SonarQube before 7.8 has XSS in project links on account/projects. |
| CVE-2019-17575 | HIGH | 7.2 | 1.4% | Oct 14, 2019 | A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an ... |
| CVE-2019-16344 | MEDIUM | 6.1 | 1.0% | Oct 14, 2019 | A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attac... |
| CVE-2019-14858 | MEDIUM | 5.5 | 0.4% | Oct 14, 2019 | A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument... |
| CVE-2019-14838 | MEDIUM | 4.9 | 1.1% | Oct 14, 2019 | A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should n... |
| CVE-2019-4572 | MEDIUM | 4.4 | 0.3% | Oct 14, 2019 | IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into ... |
| CVE-2019-17574 | CRITICAL | 9.1 | 9.2% | Oct 14, 2019 | An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially... |
| CVE-2019-17553 | CRITICAL | 9.8 | 1.5% | Oct 14, 2019 | An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI. |
| CVE-2019-17552 | CRITICAL | 9.8 | 1.1% | Oct 14, 2019 | An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in... |
| CVE-2019-17408 | CRITICAL | 9.8 | 3.7% | Oct 14, 2019 | parserIfLabel in inc/zzz_template.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because t... |
| CVE-2019-17547 | HIGH | 8.8 | 1.8% | Oct 14, 2019 | In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free. |
| CVE-2019-17546 | HIGH | 8.8 | 3.4% | Oct 14, 2019 | tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that... |
| CVE-2019-17545 | CRITICAL | 9.8 | 2.6% | Oct 14, 2019 | GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exce... |
| CVE-2019-17544 | CRITICAL | 9.1 | 3.3% | Oct 14, 2019 | libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp vi... |
| CVE-2019-17543 | HIGH | 8.1 | 9.1% | Oct 14, 2019 | LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applicati... |
| CVE-2019-17542 | CRITICAL | 9.8 | 2.3% | Oct 14, 2019 | FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_i... |
| CVE-2019-17541 | HIGH | 8.8 | 2.4% | Oct 14, 2019 | ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager i... |
| CVE-2019-17540 | HIGH | 8.8 | 2.1% | Oct 14, 2019 | ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c. |
| CVE-2019-17539 | CRITICAL | 9.8 | 2.0% | Oct 14, 2019 | In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified oth... |
| CVE-2019-17501 | HIGH | 8.8 | 2.5% | Oct 14, 2019 | Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (... |
| CVE-2019-17538 | HIGH | 7.5 | 11.6% | Oct 13, 2019 | Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=... |
| CVE-2019-17537 | HIGH | 7.5 | 1.6% | Oct 13, 2019 | Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?... |
| CVE-2019-17536 | MEDIUM | 4.9 | 2.3% | Oct 13, 2019 | Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/c... |
| CVE-2019-17535 | MEDIUM | 6.1 | 2.0% | Oct 13, 2019 | Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a... |
| CVE-2019-17534 | HIGH | 8.8 | 2.4% | Oct 13, 2019 | vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifG... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now